Analysis
-
max time kernel
90s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
18/03/2024, 16:15
General
-
Target
mappack_pre5_v1.0.4.1-2bad.zip
-
Size
11.1MB
-
MD5
aa66d2abafd5f7e5abd2b3a9ec91d916
-
SHA1
fbd54c2b17fdd736a0894c1405123400df1d49b8
-
SHA256
c68bc9a30b8a932dbbeade659b6215fde169a9860e9f454b545e16605aba6d2f
-
SHA512
ef529274a816ab053829d49adf0f13d543849684b515dc3a516fce8681bb8289142330e36d4a63b63da53eb103df6b274e8eca8852e3a08d7ad2595f46022eeb
-
SSDEEP
196608:9I1yXWbU/qb2/6kdlBZX+N1dgqFkIh9tdivkS4Ru20VREq4hw3XEB2/RzA/A2x9d:9rXWbU/qbU6kdluDikh9e7ShsyezOdxD
Score
1/10
Malware Config
Signatures
-
Modifies registry class 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\mappack_pre5_v1.0.4.1-2bad.zip1⤵
-
C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe"C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\MiniSearchHost.exe" -ServerName:MiniSearchUI.AppXj3y73at8fy1htwztzxs68sxx1v7cksp7.mca1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx