559c556615dc2d9a938c71fc7161bc864f7f9a8aa022253c63e2791c2ef29904

Resubmissions

14-11-2023 21:49

231114-1pjqdahd7v 5

14-11-2023 18:07

231114-wqjdsaea81 5

Analysis

max time kernel
407s
max time network
413s
platform
windows10-2004_x64
resource
win10v2004-20231023-es
resource tags

arch:x64arch:x86image:win10v2004-20231023-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
14-11-2023 21:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

RADICADO;344057980 2023 0901-00.msg
Size

121KB
MD5

02c1e35c3af928a00557892885f04a9a
SHA1

af5de43218f128a3aa18031f123d4791e361eac3
SHA256

559c556615dc2d9a938c71fc7161bc864f7f9a8aa022253c63e2791c2ef29904
SHA512

8e0c4ec263b220dd57e3e2050b592c6721f82e8cb1c6ff5cb31385cb383ffec8e5c9ea260357490ea144ab5b6e928a75815ed812af1d42bd2de28e20e10d312b
SSDEEP

1536:0/bZuFaSE5FIZKM/KM22JFIH63FJW0WaZxUaWFHFsFSnMZWRWoM71:0TZySFIZKyK/SFIH6ils+2O21

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2231940048-779848787-2990559741-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2231940048-779848787-2990559741-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2836	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\RADICADO;344057980 2023 0901-00.msg"
1⤵
- Modifies registry class
PID:2060

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2836

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads