Analysis
-
max time kernel
91s -
max time network
92s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
-
submitted
06/06/2024, 10:48
General
-
Target
FNIS Creature Pack 7.6-11811-7-6-1582308240.7z
-
Size
466KB
-
MD5
25ecb147d599d1e89fc3d004c804eddb
-
SHA1
e795df3bba54bb89cd96c1fc753c5f46b9f818a9
-
SHA256
fe654a30ccb95f4849f40db9c2d08524ef31e83b5aed6e814d2ef333eb8d30b5
-
SHA512
2cbc869b7b450e62ea8c5287787a7ae3874d1d4eb9fee18b7a7d7a91bfbfc1c297483b454863a2007975b2206898be0534eab4b846cf08521d518184fd1dbada
-
SSDEEP
12288:3+fesIq04sMPPSnqK963pClSy3lgs7PVyKJcBa+/FpQI:3+feJPAP2qKbS2/yCcBa+/FX
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\FNIS Creature Pack 7.6-11811-7-6-1582308240.7z"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx