Analysis

  • max time kernel
    74s
  • max time network
    96s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    16/05/2024, 20:53

General

  • Target

    Fireworks Mania_Data/boot.config

  • Size

    164B

  • MD5

    55d32d1e05e573541aabee03780f5c44

  • SHA1

    5b82bc7a869a632f7041c055eaa9b2c6aff4fc80

  • SHA256

    bf874d339472e772b7131ffb9593d330db2a137412a62259dba5d15547c55cdc

  • SHA512

    59b7c255b6e93fe8cf7eb026e1a64d6127cab7313a5f771a91669e790d242014c9dc9adc64135dc72bf4b3cdb953a8810c5e7567004cd7f4e61f32e90434b702

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\Fireworks Mania_Data\boot.config"
    1⤵
    • Modifies registry class
    PID:796
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4044

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads