Analysis
-
max time kernel
167s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
08-03-2024 19:25
General
-
Target
Ragib's Website Project/font-awesome-4.7.0/less/core.less
-
Size
452B
-
MD5
fb4efe4ae63737706875bbbfc7b7e9af
-
SHA1
1a37352286619b789d151a06eb4b7551e4c1aaa2
-
SHA256
a4a93d598134f656ac6c7a0a5f375afa941e71e348e68ecf3cd6feb7616acf9e
-
SHA512
88b310200bdd13129f343e8f9b581e3a376fd5aec4c7a604815101774d31ca3fb469d345321aee80303842309b10273885195545f69fb81ea13215e751ef5187
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Ragib's Website Project\font-awesome-4.7.0\less\core.less"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx