Analysis
-
max time kernel
134s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
20-05-2024 18:05
Behavioral task
behavioral1
Sample
Blok-reklam.TPS.apk
Resource
win10-20240404-en
3 signatures
150 seconds
General
-
Target
Blok-reklam.TPS.apk
-
Size
184KB
-
MD5
69119c73ed5417445b2d24952ff428e7
-
SHA1
4694bc2e23eac8acbb501220c2a722ae6ce90610
-
SHA256
8ec195cd1f5c9f66c75000f26120832d7e1a9044fe3699d18d676bd5739b8518
-
SHA512
45b25cddfb0424998714e65f1595fbfca89b70cc5a4abb7fae6297aaf9b811b03f46f8148f81af3b7311f352d3db6ed441186cfd612824b813fe3c75202678a0
-
SSDEEP
3072:Yulq8duqQqj7yVtIw3Ng5kQi3PJg7u3sw6ou64UU/U7Xji02U9ziqJH6/h9uYL:YGQqPyVtT3Cu/RguZwxUUui02U9zbaJj
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2864 OpenWith.exe