Analysis
-
max time kernel
27s -
max time network
153s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
23/02/2024, 11:25
General
-
Target
$APPDATA/EaseUSOS2Go4.0/os2go/bin/TbConfig.ini
-
Size
57B
-
MD5
f1e8e80c8b444c4f0f22042fbb79d066
-
SHA1
4d1c61bca3c69ab89a643a666569d0a11ed3bf7a
-
SHA256
42cebbe65b51ebe599bd15b2315014336ff686935bf501ad5f0704c4d4fadb4a
-
SHA512
8c2999886cef1554fec1709807e26352c721fbe67b591c0f53c026e9d729afee8b666d57e3940703c95cf5aea88d93a47860e07543e01a9c7405d65dc240821a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\$APPDATA\EaseUSOS2Go4.0\os2go\bin\TbConfig.ini1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx