Overview
overview
8Static
static
1Speedrun-Box.zip
windows11-21h2-x64
8db/000099.ldb
windows11-21h2-x64
3db/000101.ldb
windows11-21h2-x64
3db/000102.log
windows11-21h2-x64
3db/CURRENT
windows11-21h2-x64
1db/MANIFEST-000100
windows11-21h2-x64
1level.dat
windows11-21h2-x64
3level.dat_old
windows11-21h2-x64
3levelname.txt
windows11-21h2-x64
3world_icon.jpg
windows11-21h2-x64
3world_reso...y.json
windows11-21h2-x64
3world_reso...s.json
windows11-21h2-x64
3Analysis
- max time kernel
445s - max time network
1168s - platform
windows11-21h2_x64 - resource
win11-20240221-en - resource tags
arch:x64arch:x86image:win11-20240221-enlocale:en-usos:windows11-21h2-x64system - submitted
02/04/2024, 12:41
Static task
static1
Behavioral task
behavioral1
Sample
Speedrun-Box.zip
Resource
win11-20240221-en
Behavioral task
behavioral2
Sample
db/000099.ldb
Resource
win11-20240319-en
Behavioral task
behavioral3
Sample
db/000101.ldb
Resource
win11-20240221-en
Behavioral task
behavioral4
Sample
db/000102.log
Resource
win11-20240221-en
Behavioral task
behavioral5
Sample
db/CURRENT
Resource
win11-20240221-en
Behavioral task
behavioral6
Sample
db/MANIFEST-000100
Resource
win11-20240214-en
Behavioral task
behavioral7
Sample
level.dat
Resource
win11-20240221-en
Behavioral task
behavioral8
Sample
level.dat_old
Resource
win11-20240221-en
Behavioral task
behavioral9
Sample
levelname.txt
Resource
win11-20240221-en
Behavioral task
behavioral10
Sample
world_icon.jpg
Resource
win11-20240221-en
Behavioral task
behavioral11
Sample
world_resource_pack_history.json
Resource
win11-20240221-en
Behavioral task
behavioral12
Sample
world_resource_packs.json
Resource
win11-20240221-en
General
- Target level.dat
- Size 2KB
- Sample240402-pwymbsad69
- SHA256 056af21684fed4f343d8b5cba9aeb74f6b0d0bd534dbd5192865b7c5e7d4bc72
- MD5 c59f6429993e33344efb32b483444da7
- SHA1 bfa36e877f39102717b1a1d7b57413050bdfe8f5
- SHA512 0b2331943f234c60ab06e8c031eafb7574dff19d79ba9b13b6533d33705974414b061ddce9cd00efa904ce35c1ca1aab28a5c359b0c67fde41f2ead0675c75e7
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-627134735-902745853-4257352768-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 836 OpenWith.exe