Analysis
-
max time kernel
118s -
max time network
136s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
19/02/2024, 20:58
General
-
Target
skysim-aircraft-md11/html_ui/Pages/VCockpit/Instruments/Airliners/SKYMD11/COM/SKYMD11_Com.css
-
Size
2KB
-
MD5
280780079503a7477e415f670ed7a4fd
-
SHA1
e3db0891661b3365f1fda466f7d4e4c86ca8d6c7
-
SHA256
f3288648aef025bd1f2d5c402b98ed05f5e77d6ec3bbeed200534ca87dfbc8de
-
SHA512
fbaf4684de3b09b3cf6ebcbf47069d7f5283fe10a0ab4d68361d78a8fd870066f2699b63604b6c3548fc8dd5ec588456326f94cc9c7b1bdb09dc4c61fc54e4d2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\skysim-aircraft-md11\html_ui\Pages\VCockpit\Instruments\Airliners\SKYMD11\COM\SKYMD11_Com.css1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\skysim-aircraft-md11\html_ui\Pages\VCockpit\Instruments\Airliners\SKYMD11\COM\SKYMD11_Com.css2⤵
-