182cb13ad02cba89064a973b59ca85db8172fc9710c264f412f0a6b4846dfb1a

Resubmissions

08/09/2026, 15:48

260908-s8stdsej31

26/02/2024, 15:19

240226-sp8qhahf6z8

26/02/2024, 15:12

240226-slg4dahe7x7

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
26/02/2024, 15:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Windows 10 - RustDesk.yml
Size 563B
Sample240226-slg4dahe7x
SHA256 182cb13ad02cba89064a973b59ca85db8172fc9710c264f412f0a6b4846dfb1a
MD5 fd8b16916864e2b17f69f84a6ec714d0
SHA1 a46c2ce7608a4143fca87da2c947d4b76d25c21e
SHA512 4dfb9925afb8e36762ecf409a260ebd472d52eaf19c624a59eacf34668b3900416b8b9b79d6dae9456e2e3e1a7c98bc5d97b546a730595a634164eeccf9b95e9
MD5 SHA1 SHA512

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1712835645-2080934712-2142796781-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1712835645-2080934712-2142796781-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1696	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Windows 10 - RustDesk.yml"
1⤵
- Modifies registry class
PID:1540

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1696

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads