93ecd91946ad9ac8e473050e6f494dbd4ff958b7630b2d761ec2f781fb296c71

Resubmissions

10/03/2024, 02:18

240310-cre8zahf77 3

10/03/2024, 01:40

240310-b3qneagf77 3

Analysis

max time kernel
9s
max time network
145s
platform
windows11-21h2_x64
resource
win11-20240221-en
resource tags

arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system
submitted
10/03/2024, 01:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Gorilla Tag/Gorilla Tag_Data/app.info
Size

25B
MD5

6be3ac14897729b8f4c837b3a18694ca
SHA1

c407ba7a2439819035ac8fc34756f7942f9d2f5a
SHA256

1517749f589e05549598043cdf04a90f9d0fe42ee99353f8ec660711303f8c15
SHA512

d4b1a7a259c38a6e741a49a0767a0cf4f2dd416ddad2ef695156597296fb1a1069a2aed05223df0dcc0849c7d1380b594e1c55ed3debaa90e73bf35bc19e7606

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3594324687-1993884830-4019639329-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3594324687-1993884830-4019639329-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1568	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Gorilla Tag\Gorilla Tag_Data\app.info"
1⤵
- Modifies registry class
PID:3864

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads