Analysis
-
max time kernel
150s -
max time network
315s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
08-03-2024 19:25
General
-
Target
Ragib's Website Project/font-awesome-4.7.0/less/font-awesome.less
-
Size
495B
-
MD5
15cb7faa02437c2f9719351c157fe7e7
-
SHA1
9ffe7422dc235450a21f019f410ed359ed151f4b
-
SHA256
2df62305a8a14e09ecad58a155a478f1c8c11318f405360be683219f62b3ea24
-
SHA512
f5cf809023468a015234142efd754543054f9fabcf06ecb58db792537b8526c5d73098cb059e6e37ddf295895e92ace9005e9c4e5eaab19d33f06ac478c69acf
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Ragib's Website Project\font-awesome-4.7.0\less\font-awesome.less"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx