b9a7c3c6e4a93465b5800d940825f318c4f1880f956f7ef80e1cb4fe0a380a6b

max time kernel
248s
max time network
253s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
01/02/2024, 15:09

Sharing

Target
Luna-Grabber-main/.github/ISSUE_TEMPLATE/bug_report.md
Size 541B
Sample240201-sjpqfaacbq
SHA256 e214fac2913661096600939e4cb3cfdd747d0ebbc13784e468e5afaf2601b322
MD5 19dcdd1cd8633266aa38efdac488f7c3
SHA1 db457b0ca0fad4ed5fa6bc749f72feb865418df9
SHA512 75d940fbe54c7faa73bb6ce394b166d653c6873635bcb28fd3307f601ac69ba93b0f7001c52bb299771a305a77606f090b70bae91b7271dcd8170b1d8ede2588
MD5 SHA1 SHA512

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3336304223-2978740688-3645194410-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3336304223-2978740688-3645194410-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3180	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-main\.github\ISSUE_TEMPLATE\bug_report.md
1⤵
- Modifies registry class
PID:3292

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact