Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
17/05/2024, 14:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ParteDenuncia.rar
Resource
win7-20240221-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ParteDenuncia.rar
Resource
win10v2004-20240426-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
ParteDenuncia.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
ParteDenuncia.exe
Resource
win10v2004-20240508-en
11 signatures
150 seconds
General
- Target ParteDenuncia.rar
- Size 1.2MB
- Sample240517-ra5jvsbc35
- SHA256 aa7d80daa488e8627316e1e24bef1a713ae4f86e4a6304c6784b6187ad0433d9
- MD5 7b70fbc992152d753ec3d3df02dd8c8f
- SHA1 d3939990389c9c2b9309793d6d60b79734b515dc
- SHA512 c247df47cee3a9432eefb890a7afd355ece04e019fd4ada1bd9f5eed9099efe83494835467694fb4a164b4bcb9651f6c37a470e42d949d4233ff1e07b24064d5
- SSDEEP 24576:dUxAjJ5eWilajWpv0+fCpyjYq0AUeYHa6MGDrtfTh+j3udsUbzN:dbJ5eWLWp8EsyjWeYlrtfTzdJ9
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-540404634-651139247-2967210625-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 1584 OpenWith.exe