Analysis
-
max time kernel
145s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
24/01/2024, 04:54
General
-
Target
Arc-1-26-45413/.background/background.png:com.apple.quarantine
-
Size
57B
-
MD5
5577c06d8fc4cc5bb6af04a120ff1d2b
-
SHA1
c2d15e6a866bc62b16c51467aa45b7172ec0a7e9
-
SHA256
8fd969e16f8d8e7342f47723442f1a7ab7ea24a91433178b5ea02d9f25d7a5f5
-
SHA512
43f23c1b2b09b783cd46b8c4ea2b7626c4122d663dad7dba6f396f12145481356d0721b454d0ca7cc8395ecc124a13f563cb3a04f2fb27a3c1307b11c1016163
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Arc-1-26-45413\.background\background.png_com.apple.quarantine1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx