Analysis
-
max time kernel
62s -
max time network
63s -
platform
windows10-2004_x64 -
resource
win10v2004-20231201-es -
resource tags
-
submitted
06-12-2023 23:55
General
-
Target
monokini.iso
-
Size
517KB
-
MD5
c86de9583cb940fc0f859b6bd80774f4
-
SHA1
af33f62c2a9734a387638e6bf6e97dd7ad5e6732
-
SHA256
2c83d90551a91ad60ec36a525821c4f89f41af1ceae22719189307222a8ac824
-
SHA512
4cf971d0363a6aa62eb0cb43c9b4c3ad620ea97af26c81877d33182283c7cac5e4c5e6178869fefd46838121395261d2ceeea5e102b0db74f94bbbf846e09d42
-
SSDEEP
12288:7wrSHsJdzh9E5Uo4ZXZRJqVXBExXRk0U8mc+jpW:lHsJdzihWJrq0DUtLjpW
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\monokini.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken