Analysis
-
max time kernel
72s -
max time network
71s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
04/05/2024, 20:07
General
-
Target
SpaceShareDist.rar
-
Size
23.9MB
-
MD5
5a92938a7ac93189cf96104c7d2d4315
-
SHA1
96e9c3dd345d12f2739fe64f48453201ff15a186
-
SHA256
41939fb736d55fb1c9f924edc96f4c7cd2529327fc2acb0b69b1f50c36566958
-
SHA512
05fca82da45fff836be2938bfc994aab967bf1212013d91a1b7c260c92e76d0a75cb55edd1731c3e8592533b2e1ccf079d080b96758dca390087bed41dcdb51a
-
SSDEEP
393216:nQJt2n+f7xtauV7C+jhHPI9ptgpZIhfh1hZa14FHLCJ9ttnKovoG45p52NJLqCex:nQJhxI1W1P4gDI71hc14FHKPnvToMNJe
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 43 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SpaceShareDist.rar1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx