f3969e0733a89f9d93925c8a4822deea9aac3e444da6bdc2a037cbd252aa1e82

Resubmissions

18/04/2024, 14:42

240418-r22bhsha9t 3

18/04/2024, 14:11

240418-rhr9hagd6y 10

Analysis

max time kernel
144s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
18/04/2024, 14:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Minecraft Install.rar
Size

37.7MB
MD5

489fb7829272e34697126dd5a10b7785
SHA1

5c0e5c43dc60f1db9a226cbd7b23e2fa649e767f
SHA256

f3969e0733a89f9d93925c8a4822deea9aac3e444da6bdc2a037cbd252aa1e82
SHA512

ce23cfed553c68ddac12ff12e16d78e4f0ebbd0df72640183c1afd80f863734d030304aec79711af529cea3028fd151efddb613b6ddeb614af6ad35e0c5e6c0b
SSDEEP

786432:/NuRVXyA1t6MF2Ll8HQgfYujJw+yKzfIu0qRcYHbvu+5ngAtYntgEHI+oBy5:Q9yA1tR+ewgRtRJwHiHSHAeWEMY

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1826666146-2574340311-1877551059-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1826666146-2574340311-1877551059-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2608	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Minecraft Install.rar"
1⤵
- Modifies registry class
PID:1560

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2608

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...