05180f8ca2f137243ff842464130fe8613cbbda29f3c7f187598c9e63b4e9ac7

Resubmissions

29/08/2023, 19:37

230829-ybztbsad4s 5

29/08/2023, 14:00

230829-rbgjesch39 8

Analysis

max time kernel
143s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
29/08/2023, 19:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Required Cfisd.msg
Size

135KB
MD5

3c283427ca5a7afe200b94e253fe9825
SHA1

bb4d7dc1b47333b9b010a3dffa7bf4acdd644c05
SHA256

05180f8ca2f137243ff842464130fe8613cbbda29f3c7f187598c9e63b4e9ac7
SHA512

f60e518321b99d4c3752e70819f1684e39b982513507f1382ff8a01d553e5ca2c1282a4c48e83520b2d8fb43de5be1de67fe27a401f8776e14405535f619f31f
SSDEEP

3072:+FOfAzBE+H/Veu7ncnEWsVqI6ByyNef31Kci:oOMeuLcnDvRWs

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-618519468-4027732583-1827558364-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-618519468-4027732583-1827558364-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3680	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Required Cfisd.msg"
1⤵
- Modifies registry class
PID:3656

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3680

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads