adb9349916189a54ff66650eacd0db73ed931be39e4118f78d21d24b2b8932b4

Analysis

max time kernel
127s
max time network
139s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21-05-2024 00:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Quasar.Server/obj/Quasar.Server.csproj.nuget.g.targets
Size

294B
MD5

79ea88591534c135b634219b63cb5d3f
SHA1

dbd95fba73a25cb0d4764371fe78112638d6265d
SHA256

c61336980da1e7a3c1cf439b6bb83a7a4e907599bc7e7bc2cfffcd9278e6576c
SHA512

dccef85e4f8c21911f0a5c1cb6a54754e3be7ca4da50818342588faac3e02ba91d3aa95d3e8a73adbf9884b79f8f1973b7f4a009494e2988a418cf322eb59f12

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-160447019-1232603106-4168707212-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

524 OpenWith.exe

pid	process
524	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Quasar.Server\obj\Quasar.Server.csproj.nuget.g.targets
1⤵
- Modifies registry class
PID:2304

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:524

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads