Analysis

  • max time kernel
    139s
  • max time network
    186s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/03/2024, 15:39

General

  • Target

    DLC/dlc040_trial_of_allegiance/dlc040.dlc

  • Size

    285B

  • MD5

    9f78250622df62deba8840946363e8d9

  • SHA1

    f6425ef1819df9083bb84ffaa930e5e8c91c8764

  • SHA256

    0dfd82e03b933c5aabc0c8a7a19cb600bf0089f78d7548b3441be42a8d8b43a2

  • SHA512

    75151141e888634c4a0837b5e5c358c15016718ae23703430091262fb9d5ffd92aad987f43714e74fe918677f5b608b57d5d69d12f0224ae9d2140a8c97ca794

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\DLC\dlc040_trial_of_allegiance\dlc040.dlc
    1⤵
    • Modifies registry class
    PID:2364
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4996

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads