Analysis
-
max time kernel
132s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
-
submitted
03-11-2023 20:20
General
-
Target
meta.sai_v1.json
-
Size
161B
-
MD5
b43ad2996145686fe1f5319cb368e827
-
SHA1
87159814d236a40623708bb52d37f2bfdaef444f
-
SHA256
a3bd3b309bf6e001b9d6f92ab8a0bbefdb5efffe18d531be1c7103da5f477d1c
-
SHA512
857cc3ecbad9c16a951a8241b65b4649554981b74be5e8fddafce689b741ea7cb6e3ea3aaf430934a93869ced3c9f7672b6996de525d0076771271592eacc065
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\meta.sai_v1.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx