Analysis
- max time kernel
133s - max time network
135s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
07/06/2024, 16:56
Static task
static1
Behavioral task
behavioral1
Sample
#!!SetUp_55209_PassW0rd$$.rar
Resource
win7-20240221-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
#!!SetUp_55209_PassW0rd$$.rar
Resource
win10-20240404-en
3 signatures
150 seconds
General
- Target #!!SetUp_55209_PassW0rd$$.rar
- Size 12.2MB
- Sample240607-vf3t1abc71
- SHA256 310c678e23e8410611d8b58232c406ab06780ef00458e981b264d229c5a74aab
- MD5 7143686128e92a79e171b42958454b3e
- SHA1 ae17a82098169f8ed5bc8da96c28dd01f37ce1bb
- SHA512 b4104e4ff27844a4335c5b316179ac3723b64524dd91afa9bfe652408d88d7a9c1c7248681e3c21ac632af14af24e738a5059e51c5b5b4c8b06b702a5acdeec4
- SSDEEP 393216:1PyZuTyUqZfz1zGr/7fjkgscdfBPGeX+DqY/0ZPL:56mqZb1zGb7fjkgscdf6qU0Zj
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-873560699-1074803302-2326074425-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3052 OpenWith.exe