Analysis
-
max time kernel
34s -
max time network
37s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
27-04-2024 21:09
Behavioral task
behavioral1
Sample
chappo_3_days_key_new.rar
Resource
win10v2004-20240426-en
windows10-2004-x64
3 signatures
1800 seconds
General
-
Target
chappo_3_days_key_new.rar
-
Size
17.7MB
-
MD5
abaac60d2349aef781d8697b26a09442
-
SHA1
f48b43b226cbbf16852f8c27710367c696b291e9
-
SHA256
f6c17feb9634d46a34ba851526576f947805135b368ff079936cdf0492553f70
-
SHA512
b4724a24e11000ae90e6a089125bbc4b140faab194d8f2dc4fb69b3f2112d4181c671bb242cf635dabd25b29071a3cdf1548d94ce06d7d14fd2c8ff2954dbcac
-
SSDEEP
393216:L3nwfyVg2kesEiwEOQ3kh+EjiRdiEAPo+kyfsC0Zwt5cnL0xfttDFBnUD9:zHaL1OQ+jjEAPo+kyfsCiU5co7tJG9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3571316656-3665257725-2415531812-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 11 IoCs
Processes:
OpenWith.exepid process 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe 1044 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\chappo_3_days_key_new.rar1⤵
- Modifies registry class
PID:4520
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1044
-
C:\Windows\System32\rundll32.exeC:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding1⤵PID:3556