Analysis
-
max time kernel
150s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
28-06-2024 05:32
General
-
Target
selfbot/data/abuseconfig.json
-
Size
91B
-
MD5
ce6646ae9ecf07a4b2a80397f39840b4
-
SHA1
aeadd5e94f1115361ed593841858cdcbf4c50c53
-
SHA256
caa80afc039e6a7e9b1b5ee985129206f888f05cfc3be1b147a1f7403338a191
-
SHA512
4907e39e133d3d05fb13badf69d6980e0a8732c393728473d4f6bcec49e6efeda49179bbef9e8e5c9126dd186b93b672d52420ba4576458dcdef0875d37ffdb1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\selfbot\data\abuseconfig.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx