Analysis
-
max time kernel
15s -
max time network
20s -
platform
windows10-1703_x64 -
resource
win10-20230915-en -
resource tags
-
submitted
20/09/2023, 09:55
General
-
Target
etc/kong/kong.conf.default
-
Size
161KB
-
MD5
0d9c3ef498de63543808347d8da4dd24
-
SHA1
ed248af605f2a2da1af0e3ac0a0448399f911f45
-
SHA256
51d04950bc0894d57a3000d80c0632cabed977633663a59ef4751ec62ecd8ca5
-
SHA512
bb4c6bd137a7b5f4d6caa7f5803a6db4b98e8c298fe823ce7ddb2ad3f49595cea82abf3325b4a87b3a33f53b67673b81874764b53fab79864a9e7a7fbb03de9d
-
SSDEEP
1536:8vhqgftDV7mSlgBLQCSlyZNVLWxIWtKOQDvsM7:uaNBLQ9yFWaWY7J
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\etc\kong\kong.conf.default1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx