Analysis
-
max time kernel
0s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
03/01/2024, 19:37
General
-
Target
locales\am.pak
-
Size
531KB
-
MD5
8e8fbaad0de95893785875e20cfbe5f3
-
SHA1
f179e4db197a974e1e428f0bcb9cb1bc09df04f4
-
SHA256
f62791089b07bb9796292e5e3fd81eb1e68f3adba0fcc88fea4df744dbad6775
-
SHA512
93cfc2f82d3f83dd992ba758d067055cc26bae5c2e9b1ecd6974f4143c22da405bc6845d2d2a811ff043ff1cd55929ed04a6f929ae01ac211c781d4786a90246
-
SSDEEP
12288:oI+uzxX8xMzKsE1gI5z9SBeuWqQ9x30jH8+I:oIVX8xMzKn1gI5z9SB6qQZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\locales\am.pak1⤵
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵