Analysis

  • max time kernel
    435s
  • max time network
    1175s
  • platform
    windows11-21h2_x64
  • resource
    win11-20231215-en
  • resource tags

    arch:x64arch:x86image:win11-20231215-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    30-01-2024 16:10

General

  • Target

    selfbot/data/giveawayjoiner.json

  • Size

    308B

  • MD5

    75f4ca24a4467c3b174a5770945769a6

  • SHA1

    d364b9fd06ea17f8e6c8601fe69e6d3ce6ef7328

  • SHA256

    0906c64139fd71d58a7a49cee41d675dfd8fcc417d098c63aafbcdb4982b903b

  • SHA512

    91196bfdd00c51cf2b4e2de45021688a202ce68f2babf0a427f8e20f632a6f5b739f49e8497fbcd304b72bc8bc9f5457963b7fd835638df449a9bbefc0901aba

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\selfbot\data\giveawayjoiner.json
    1⤵
    • Modifies registry class
    PID:4592
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:5684

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.