Resubmissions
Analysis
-
max time kernel
146s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
03/06/2024, 13:04
General
-
Target
resources/app.asar.unpacked/node_modules/@wickednesspro/bento4-latest/src/platforms/darwin-x64/include/Ap48bdlAtom.h
-
Size
2KB
-
MD5
2aceed73115566e3aaafc684d346909e
-
SHA1
d2886bcbe478190accb0c6f0c2fd923564c732c6
-
SHA256
04581beb190c063564eb5ed75b2b3c6a6fb754c7d1dac9af6d1f28deeb4fc3e1
-
SHA512
6a23d08f1f14efc9a9b0a8f8c1da1b2a9ad8945dd4eda6d81bf0c7ed758db0ce01951df1b3eb56655303834ecd0fb37c6fbfcaaec5676d49369444117cb4c773
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\node_modules\@wickednesspro\bento4-latest\src\platforms\darwin-x64\include\Ap48bdlAtom.h1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx