Analysis
-
max time kernel
134s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
12-02-2024 20:00
General
-
Target
Bestellung+BEE-22201200_pdf+++++++++++++++++++++++++++++++++++++++++++++++.iso
-
Size
104KB
-
MD5
cdfb2162885d92ca5fd2c8c1a3c79705
-
SHA1
fefdeecc76163884124c070bf0f0fea9c027354f
-
SHA256
95f3bf41ab43a29221a702337ffd53a3974b628aa6c5eccd37a4cf3d79732740
-
SHA512
b7a48d32285305024414561bef69011e0a287b8f11c7b0fd12a469fe9cfd63abef424f922a360a0e66604669740a224c71011e94bd2ced0de000280ebd06d6be
-
SSDEEP
96:5ReBVCIzP+eImTgo70FlDiC5ZUo4ossr9r4GvgsKC5Ys0X+zNt:gVCcPjTgJhYo4orprW7o0XY
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Bestellung+BEE-22201200_pdf+++++++++++++++++++++++++++++++++++++++++++++++.iso1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken