Overview
overview
3Static
static
1tampermonk..._1.zip
windows7-x64
1tampermonk..._1.zip
windows10-2004-x64
1LICENSE
windows7-x64
1LICENSE
windows10-2004-x64
1_locales/a...s.json
windows7-x64
3_locales/a...s.json
windows10-2004-x64
3_locales/b...s.json
windows7-x64
3_locales/b...s.json
windows10-2004-x64
3_locales/c...s.json
windows7-x64
3_locales/c...s.json
windows10-2004-x64
3_locales/d...s.json
windows7-x64
3_locales/d...s.json
windows10-2004-x64
3_locales/d...s.json
windows7-x64
3_locales/d...s.json
windows10-2004-x64
3_locales/e...s.json
windows7-x64
3_locales/e...s.json
windows10-2004-x64
3_locales/e...s.json
windows7-x64
3_locales/e...s.json
windows10-2004-x64
3_locales/e...s.json
windows7-x64
3_locales/e...s.json
windows10-2004-x64
3_locales/f...s.json
windows7-x64
3_locales/f...s.json
windows10-2004-x64
3_locales/h...s.json
windows7-x64
3_locales/h...s.json
windows10-2004-x64
3_locales/h...s.json
windows7-x64
3_locales/h...s.json
windows10-2004-x64
3_locales/h...s.json
windows7-x64
3_locales/h...s.json
windows10-2004-x64
3_locales/i...s.json
windows7-x64
3_locales/i...s.json
windows10-2004-x64
3_locales/i...s.json
windows7-x64
3_locales/i...s.json
windows10-2004-x64
3Analysis
-
max time kernel
147s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
11-06-2024 18:31
Static task
static1
Behavioral task
behavioral1
Sample
tampermonkey_5_1_1.zip
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
tampermonkey_5_1_1.zip
Resource
win10v2004-20240426-en
Behavioral task
behavioral3
Sample
LICENSE
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
LICENSE
Resource
win10v2004-20240426-en
Behavioral task
behavioral5
Sample
_locales/ar/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral6
Sample
_locales/ar/messages.json
Resource
win10v2004-20240426-en
Behavioral task
behavioral7
Sample
_locales/be/messages.json
Resource
win7-20240215-en
Behavioral task
behavioral8
Sample
_locales/be/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
_locales/cs/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral10
Sample
_locales/cs/messages.json
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
_locales/da/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral12
Sample
_locales/da/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
_locales/de/messages.json
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
_locales/de/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral15
Sample
_locales/el/messages.json
Resource
win7-20240419-en
Behavioral task
behavioral16
Sample
_locales/el/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral17
Sample
_locales/en/messages.json
Resource
win7-20240215-en
Behavioral task
behavioral18
Sample
_locales/en/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
_locales/es/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
_locales/es/messages.json
Resource
win10v2004-20240426-en
Behavioral task
behavioral21
Sample
_locales/fr/messages.json
Resource
win7-20240508-en
Behavioral task
behavioral22
Sample
_locales/fr/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
_locales/hi/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
_locales/hi/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
_locales/hr/messages.json
Resource
win7-20231129-en
Behavioral task
behavioral26
Sample
_locales/hr/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral27
Sample
_locales/hu/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral28
Sample
_locales/hu/messages.json
Resource
win10v2004-20240508-en
Behavioral task
behavioral29
Sample
_locales/id/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral30
Sample
_locales/id/messages.json
Resource
win10v2004-20240226-en
Behavioral task
behavioral31
Sample
_locales/it/messages.json
Resource
win7-20240221-en
Behavioral task
behavioral32
Sample
_locales/it/messages.json
Resource
win10v2004-20240426-en
General
-
Target
_locales/be/messages.json
-
Size
45KB
-
MD5
eaa22b0fdf9efa55d9dd00e976400aeb
-
SHA1
f29f1eefeddbfb7954de0d3fce96cd19b7980c5f
-
SHA256
6a87274b02dab119cc5ef421f70641c5bbd688982593990158abfbddc1085da5
-
SHA512
4aab4d83baa8c1ef3c0149071d66ddc3b016470de43db5379c45c4ea7cf2e51412f42669d3db2d0aa2917b7a928ce47934ef7cd4d6b4f3a024fb33c47ff035ef
-
SSDEEP
384:4sM/CvV5qynWmmCSHkfwjXWo56DHLCKjp0+lUWFM2qUV4OrwP9E+2Kjx3NvSpH34:6DmmCSwfVMCMN5Pms7vLLIYiyijlHy
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 3264 OpenWith.exe