35f671ea54afd102bbd3df46a352d23df13db5b414289b02d5bbc1218fc6d9e4

Resubmissions

22-02-2024 19:03

240222-xqpfgaed92 10

22-02-2024 18:10

240222-wsetdade6t 10

Analysis

max time kernel
1s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
22-02-2024 18:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

locales/pl.pak
Size

543KB
MD5

7d822c9fdacb73d39ea98102dec09fee
SHA1

1e3117cc8f465d0724bcd36df117f65354d8ecc0
SHA256

055510218bdc502f8f4b9c9cb71460e75af6860dd6fdd4ea8dc7662d39fa21c4
SHA512

1a2ef9746341c1f411de15942e43d297ac0c762b2cc8cbdffd9cdfcc510027b7e7a439c28abd582359f1565c6adc8a4f304d934d392f023bc6a73896068fc3b4
SSDEEP

12288:XWCtr/9jWoOB/kheU/AGfQfS6HAcbUdP1CUd4e3m/UbMAmw1QhisB5W/N4VckJ:GO9A8zM41Qhn5eE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4280069375-290121026-380765049-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-4280069375-290121026-380765049-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2184	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\locales\pl.pak
1⤵
- Modifies registry class
PID:1096

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads