Analysis

  • max time kernel
    440s
  • max time network
    1167s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/02/2024, 12:36

General

  • Target

    doc/src/Develop.rst

  • Size

    105KB

  • MD5

    e56d2562c2a861888c93647adc3c868e

  • SHA1

    7a1568cc9b3121283cfd122efb281d1ce5855aa9

  • SHA256

    9a926548948c7aadd6cf723b757eaabbf0a9e43039d548b2b25cf3d3535e03f5

  • SHA512

    64a7e06826d7abc71a101b98a74f44533a9ed509789ecc8a9776276c4ae98bdee95e4191b1911b40a7ea174746a869d2c8392c6c132700029ac43742d923118b

  • SSDEEP

    3072:zdIJ44afjeTuqD0bJ8OZjB36Mc9wYAQWLqHw:z+J44afjeTuqD0x36gQWx

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\doc\src\Develop.rst
    1⤵
    • Modifies registry class
    PID:1604
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4080

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads