Analysis
-
max time kernel
148s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
28-06-2024 05:32
General
-
Target
selfbot/data/gmail.json
-
Size
61B
-
MD5
2978d522a7a522174f6f6e4cab4de98a
-
SHA1
40d0382b703fcfbcd7cbf9a18915d9144eac09ef
-
SHA256
2b37f0ff70ddcb4ece931d0f60845c7739cd88c9f5d4b7863a863d0b8cf8fff2
-
SHA512
5f14799666eb0fdf30f19d9623f9646b6571c80c70d2975f34962b83a1e9dbf96b6203a86b8feb1025bafdc3b8b037e6743235f6f5ec2086ef00076a8c372b3f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\selfbot\data\gmail.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx