Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
28/03/2024, 16:35
General
-
Target
aaa.cfg
-
Size
354B
-
MD5
8e6ebb2717d49bbc0988eabd8d8e7792
-
SHA1
ef100da039632e298c52a2e158ca180fde1aa901
-
SHA256
6e96bb07ab131c7d4b21ef8c0ffff14003d391c62460894eca1ac597becfd85e
-
SHA512
d856a297626b76ff0f9985ee262be735848569fbc89305f14eba81199d0481d0663afa57ffe0af508d5f9a4b59aa542a667733b71120c4e59014e9060dcfd42f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\aaa.cfg1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx