Analysis
- max time kernel
92s - max time network
125s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
09/02/2024, 03:09
General
- Target d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df.exe
- Size 536KB
- Sample240209-dntgvsgf94
- SHA256 d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Suspicious use of SetWindowsHookEx 3 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df.exe"C:\Users\Admin\AppData\Local\Temp\d1434a4d08341f78a58b3dbf922831cc4dc1cff634acd7385ed81bba15d848df.exe"1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.execmd.exe /c C:\Users\Admin\AppData\Local\Temp\2⤵
-