43bd0cbcf15fa2a1812f98838480ae0fd1f58d74f24e71d4bb77e2189bcc431d

Resubmissions

09-03-2024 10:52

240309-mymazaga2t 5

09-03-2024 10:51

240309-mx4hvsfh9z 5

09-03-2024 10:50

240309-mxkqrafh9w 5

Analysis

max time kernel
37s
max time network
44s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
09-03-2024 10:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Adobe GenP 3.0/Resources/ICONS/Cure.bmp
Size

6KB
MD5

079f2e0fbbe5cf57a8d9c5b9f2caa26e
SHA1

060b0f36cf5831ce4bc4000b9d390a9c005aed2e
SHA256

f8431728cdd9bfb09f1eaf062e966356ea26f15d39c504943847928bf5a4a980
SHA512

1b26449991c299a2af7234850864e1dd1d1deb7aa415a4c12caf0c9cf8ce413b48e49a5f5269c1fb653a7b358a171df64ad38f5412b49eb7f054c6cc669a8460
SSDEEP

24:zOg/j9VoC4eHBRpETgQioLqaXpUjmIqxd79jdM/od6tQZuvBfzcXZPItRH5cOSvo:zp/HpCgdoLbyq5jd7xuZB2jN76

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4652	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Adobe GenP 3.0\Resources\ICONS\Cure.bmp"
1⤵
- Modifies registry class
PID:568

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4652

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads