Analysis
-
max time kernel
125s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system -
submitted
02-12-2023 22:52
Behavioral task
behavioral1
Sample
Lethal Company.rar
Resource
win7-20231023-en
windows7-x64
9 signatures
600 seconds
Behavioral task
behavioral2
Sample
Lethal Company.rar
Resource
win10v2004-20231130-en
windows10-2004-x64
3 signatures
600 seconds
General
-
Target
Lethal Company.rar
-
Size
52.1MB
-
MD5
44cdf025b72cf63a28eff7d2252a5ea9
-
SHA1
7f1d14ac8be5dd35a3d9f842f953e383c464f625
-
SHA256
8cc7296a4559e5055a9f90e879592428f156766ae69c97c8fb813716c3868294
-
SHA512
50fc3f8c798b286787c0afba8a715752d991fefcac9afb58c58b301f1e52578c63f11d324aa7a5dfff3a189a8cb8ee2ae7aaf29e77c95e93118e04ca04918b9c
-
SSDEEP
786432:Ptbfo/7OicUbONHiZzu74nfLofKnky9NyRmGYKLkGqFU06OPcfST0tPRvzJWAJCU:FbQgUbMMfVnkrj1LkGydvvYtP1YA/
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-423100829-2271632622-1028104103-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-423100829-2271632622-1028104103-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3428 OpenWith.exe