Analysis
-
max time kernel
129s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
-
submitted
16/11/2023, 09:02
General
-
Target
RuntimeInitializeOnLoads.json
-
Size
13B
-
MD5
6787a74350ff8c4498c93c89998afae3
-
SHA1
d2e2d92b3e4ea757ab451bfe092f50f0c142daaa
-
SHA256
6a33c1efd5944feb0cb1e012e26b30c3f43fec918e5643e72ab945a9c504ff13
-
SHA512
887a6309a6eea0a8af051aa5005a2167c4a520bc16187568854bea2dff7cbc3070596537821fbde86d3006393b37dfd0f750426140207be0e19ffc11aa47f2d1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\RuntimeInitializeOnLoads.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx