dca3cb7fe33702fd43095f2c3995090f0ed40ee0be9ac2b05196cd92f82307b9

Analysis

max time kernel
137s
max time network
102s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
16-05-2024 17:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CIRCUITO 01 DEMANDA EN SU CONTRA NOTIFICADO EN EL DIA DE HOY CARGO PROCESAL.rar
Size

2.0MB
MD5

57e8fd539c676f1c9edcff8d92a67aff
SHA1

d9512e1f98839d90e95bb6c27f0e8c22a89372da
SHA256

dca3cb7fe33702fd43095f2c3995090f0ed40ee0be9ac2b05196cd92f82307b9
SHA512

58ef9070f2c51d51c20881cb6cb4fa5ee17d48ca15df1fd0812dfa91385d83e1cb8b8eb881c02282c78d7d4bed65f92e205ee9c615b11ac5d156c465b519220f
SSDEEP

49152:GhNHNW0gcdgefDl3VgXebgvCTNr3FiTyDIjr:GZxGXQ10eDIjr

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3558294865-3673844354-2255444939-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

3160 OpenWith.exe

pid	process
3160	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\CIRCUITO 01 DEMANDA EN SU CONTRA NOTIFICADO EN EL DIA DE HOY CARGO PROCESAL.rar"
1⤵
- Modifies registry class
PID:1012

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads