Analysis

  • max time kernel
    138s
  • max time network
    163s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31-12-2023 07:17

General

  • Target

    2d0dedb7f2ab35dd1c4a2d7177da7974.jad

  • Size

    366KB

  • MD5

    2d0dedb7f2ab35dd1c4a2d7177da7974

  • SHA1

    559f966444f7aafc9ace18868eb8b3baf0ef64f3

  • SHA256

    86111e439becfb8a37c29e8ae0acca55edefc2e93ca1e1be8c71129cb4551420

  • SHA512

    f0583fa033adb5c1cbd11983a48f35fca2e20d327707f2dd69f4d9739aa825b44e43f22dcfd22491fb2a722aed62b712939921ed95a6d2d9eed5f10103c2f7cc

  • SSDEEP

    6144:Pbe8RI2w98lJOcS1S0BwB8IoRnfti8t7eZwXePIsXLTYfDEo89uhNGjsGM:TcM1lxEftJReieDXLMfDnMu4s/

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\2d0dedb7f2ab35dd1c4a2d7177da7974.jad
    1⤵
    • Modifies registry class
    PID:1956
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1972

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads