Analysis
-
max time kernel
94s -
max time network
127s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
05/07/2024, 01:32
General
-
Target
Perks.sk
-
Size
15KB
-
MD5
18e721677ce626c57358e061b3b7e650
-
SHA1
7fccf6776d7ecbb9f6e844268664377a5d66229d
-
SHA256
61e31c709e01ed6ddb46e1cf23490f5c2efbf029190077f9bbe5135c3bc69d2a
-
SHA512
b8c3b4206f61855aa77c89a04f1c0420991322db3fbf26d6f002ef365201c7fe10df7a44d340051371a920c711ded258ecdc7d898b9574998eac4437a7c3b62f
-
SSDEEP
192:mPQgEehIGFiRvaht6SiuPSI2OhIkHIlhqrht/S2tSIRXIupItD3glhtZSXg1SITP:mPBARC0V3GlfVlr0sRnfL1c2zrR53K+Z
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Perks.sk1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx