Analysis
-
max time kernel
143s -
max time network
149s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
23-02-2024 11:25
General
-
Target
$APPDATA/EaseUSOS2Go4.0/os2go/bin/lang.ini
-
Size
3KB
-
MD5
fa504f157c0725923732633706c4008e
-
SHA1
eafd83ff3482dbeefc072a66cb74bc9643debb3c
-
SHA256
f1003ad921a712802bd58b554249b2f3512eb9357dc4800fc1a2f0cb1290fef5
-
SHA512
a0a9e78db52750d50547605aabfb8d4a6a2d546df2e357816b024a20fda66eafc7c656e7eb6a2293f6993dfc6e45e116cd6b0dfbe57375510b7ecffd76d266f7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\$APPDATA\EaseUSOS2Go4.0\os2go\bin\lang.ini1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx