5f58a2c6cd761ab224ee1065dfa8025bd197dde1b6e286e05de15cb7aa4fdb78

Analysis

max time kernel
149s
max time network
161s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
25-05-2024 19:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Base-Sniping-Bot-Opensource-main/abi/v3_quoter.abi
Size

3KB
MD5

8b3a6670a3c6abf7ca296b65ba2fe58e
SHA1

b972123509a5c99dc2ea9c33e06737943a917748
SHA256

004481860986183568ea1d6ceab0340eef07f15f7525c65bd48c6a1b1fd73999
SHA512

9f701f905106a52861cdc442c41cb2d3ce495f736e9908803fc87676dc73ee2ba62ba1d7f4173e25a380fb591944d6c1a3d21ca11e9a44693b0be6bdbdc1414b

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

3664 OpenWith.exe

pid	process
3664	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Base-Sniping-Bot-Opensource-main\abi\v3_quoter.abi
1⤵
- Modifies registry class
PID:2188

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3664

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads