Analysis
-
max time kernel
92s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31-01-2024 14:39
General
-
Target
rom1.bin
-
Size
195KB
-
MD5
44552702b05697a14ccbe2ca22ee7139
-
SHA1
47d2ec4b342649e4c391043ab915d4435f9d180d
-
SHA256
41de2047af8382988bfd568035ff26eec5f1cabc3efe773680546aa00a82857d
-
SHA512
28b02c3a83f6107aa277fd86da8e8bb8d7273ec76aab9090dbc2ebb7ce3d1ea2ae9d41973894cc904b0dadcdaf9d8f1d8ae4e49e506e2d46890184075b441d79
-
SSDEEP
3072:6MP0Tk3xqZ7Ngv9DG+1iu/APblMy81qEjRGELgua:6K0dZ7Ngv9DGoiCqHAa
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\rom1.bin1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx