c64078d83451736e26ad57cde3cca028d01569e1ab49c166539cb70a53334de0

Analysis

max time kernel
149s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
10-03-2024 20:50

Target

Luna-Grabber-main/.github/ISSUE_TEMPLATE/bug_report.md
Size

541B
MD5

19dcdd1cd8633266aa38efdac488f7c3
SHA1

db457b0ca0fad4ed5fa6bc749f72feb865418df9
SHA256

e214fac2913661096600939e4cb3cfdd747d0ebbc13784e468e5afaf2601b322
SHA512

75d940fbe54c7faa73bb6ce394b166d653c6873635bcb28fd3307f601ac69ba93b0f7001c52bb299771a305a77606f090b70bae91b7271dcd8170b1d8ede2588

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3270530367-132075249-2153716227-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3272	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Luna-Grabber-main\.github\ISSUE_TEMPLATE\bug_report.md
1⤵
- Modifies registry class
PID:4516

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact