Resubmissions
11/06/2024, 22:00
240611-1wsa4atclj 311/06/2024, 21:59
240611-1v3enstbqe 311/06/2024, 21:55
240611-1sssfstbkf 3Analysis
-
max time kernel
61s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
11/06/2024, 21:59
General
-
Target
nexus.rar
-
Size
396KB
-
MD5
0a0a792644f7dff6190ab70b5b5019c0
-
SHA1
2303b3d609dfb7e50639846b623e804f0e686568
-
SHA256
02e64db97eb1426e0375aef01fcdca3dbd5a9031f8087ba3454f4c74c51fdf08
-
SHA512
4664c103e2603f3df4fd8e308ee60495f21cbc124cec6d55075db6b2d970f58110a4814928cfde53524070804ab239228843a6fcb305c6d49a0683bf045a9cbc
-
SSDEEP
12288:usW/YO53NAFGcgDN4WPf0A+icha0ylQ9sVOOxz1:uZ9NfCWngFylQ9qOW1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 49 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\nexus.rar1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx