Analysis
-
max time kernel
515s -
max time network
432s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
23/07/2023, 17:46
General
-
Target
baseline.profm
-
Size
176B
-
MD5
71538136611e022cf0d0f0f26f1e866a
-
SHA1
d121958846e1bbe602e00f07dc3eb10269d9f200
-
SHA256
496d7b314b7fb3f883160181030bb030e3fbed81e64b877f1f98f8a2c373188f
-
SHA512
7875d6d1571d69bf0af7d80e13df3f96ac525b84b8c00b95f2ceae81a0d05f84d243f7176e84c5bcd1bcb3e31b64fa080e1d04b4b36ae362cb7b9fb185ade87b
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\baseline.profm1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx