Analysis
-
max time kernel
137s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
01-08-2023 19:38
General
-
Target
Cloakedbgfjfjjaea5_browsingIso.iso
-
Size
1.4MB
-
MD5
41241df93521de6b7b10d0fea2effc7b
-
SHA1
07085d8cdf9b8f046193cf23610e9eece60d370d
-
SHA256
347715f967da5debfb01d3ba2ede6922801c24988c8e6ea2541e370ded313c8b
-
SHA512
d1976c1003cf7fd51ebb488fe09d31137558806ef28382d7b23b1227835c5f73d4f7fb42069a8235b084afe4ae427b9609cdabb4ec52a55e860b3f1da4f8e391
-
SSDEEP
12288:vV6yXCzzn+KHpN2YouBye2n0Yaot3VQVaR788W+vTCy8sX8uzF/6A4kony:vVAn+4x2n04tFQ4XW+zX8qF/t4n
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Cloakedbgfjfjjaea5_browsingIso.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken