fe43041e7116f3a9c979a0c590896c64f9f55f14114aac5c0c36eab55ed92a8e

Analysis

max time kernel
132s
max time network
165s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
03/07/2024, 22:21

Target

0420 - Dragon Ball Z - Shin Budokai (Europe) (En,Fr,De,Es,It) (v1.01).iso
Size

774.1MB
MD5

7c8e04b66cb2e4c3473cb1427a614f71
SHA1

ce5a4dfee4d1782a612d164d31ed3114caaf5a71
SHA256

a8bd651be145ec890ccd59e3fe7abf477535a38de10464e1aa529b49db1e1201
SHA512

2b73acb14a27d21b1832abcbca8a81f16b248530271aea26454cf1dfad0d7f06b86f403b7a58a037c0ef3b717b8cd302ed95abc5dcb399207d010b6fd0969e65
SSDEEP

12582912:WfSpNMX8FbHSpNMX8FeeSpNMX8FxfSpNMX8F7dSpNMX8FDm9:O2NMX8J2NMX8V2NMX8b2NMX8L2NMX8k

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	cmd.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	2160	cmd.exe

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact