90bf554dcf5f0775bac053eaf5055b74b2cfe0ac29fdc4d41547176b3301719e

Resubmissions

23/05/2024, 15:52

240523-tba3ragd57 7

23/05/2024, 15:44

240523-s6hweagb94 7

Analysis

max time kernel
1382s
max time network
1177s
platform
windows10-2004_x64
resource
win10v2004-20240426-fr
resource tags

arch:x64arch:x86image:win10v2004-20240426-frlocale:fr-fros:windows10-2004-x64systemwindows
submitted
23/05/2024, 15:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

scripts/enumerations/Protocol16Type.json
Size

360B
MD5

bbae8a19e93407668e9943912cd5a7c1
SHA1

bec59f79b6a05e5388fc46a242a0314a706e4385
SHA256

299a0271b17cef1c967e325a028da23b4b3af2dd2158adfde12fd5fcf49bad10
SHA512

daf2b32b5ac37f5d39b77a7ea11d40c346a3d7b704631f508724ae53962d03bb1775e9ac0b0138f1b11ff6e2ac2db01152aa71443d797b05bea9502e0b21d653

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1532	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\scripts\enumerations\Protocol16Type.json
1⤵
- Modifies registry class
PID:452

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1532

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads