950be231b6b84059c93f0a142a503ea0cd4c21bd684dc667a86f531b443b691a

Analysis

max time kernel
315s
max time network
386s
platform
windows10-1703_x64
resource
win10-20231025-en
resource tags

arch:x64arch:x86image:win10-20231025-enlocale:en-usos:windows10-1703-x64system
submitted
12-12-2023 21:39

Target

CuteVirusCollection-master/consecutive_normal_punch.c
Size

158B
MD5

4452cc1e67225ff8b86e515e755e1a66
SHA1

5fddf2638f3e5e9e2dcdad0ac266d6c97ca4831d
SHA256

66fccdd0fb816c2c38aa501562d7a05ac0cec2c028dfc7f55e23a8198a70244d
SHA512

dd37ab4ab7cdfd3e90836eea62fdfe2a22b4ba0e88874d1cb38807b4bd46a46aa891a2f854f70694b8824847c92a8ca58a2ca8fc206b766c6d8decf103b3a9c3

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2852493121-870915337-2715324265-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2852493121-870915337-2715324265-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4996	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\CuteVirusCollection-master\consecutive_normal_punch.c
1⤵
- Modifies registry class
PID:4276

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact