Analysis
-
max time kernel
93s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
09/07/2024, 15:23
General
-
Target
Y O U - H A V E - W O N - A - E S S E N T I A L S - O U T D O O R - B O X !!! #lRo.msg
-
Size
383KB
-
MD5
5818910a8a5ee1b37c5aa394ac4ac701
-
SHA1
4956a686afbf3844a3d57096819de7c77b53813b
-
SHA256
cc609cbaf5baced81b2518c0f2f5d1bbb4c52edbf23bc6ef92892975e78cf1be
-
SHA512
986ff678d771243d1b194a4e5dc7f2bb95c7a34f01ef9f6bf74baedfe2bddf55cc02147b4865987a9710658d531a49a51866be4f04abb1e4c9c900face35c097
-
SSDEEP
6144:XsTlp45GQPEdMxropFr3oHm6X3e7NSPdZkppChroA3Y28rb:Xsc4ZIrw3oTe7NSvkppwar
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Y O U - H A V E - W O N - A - E S S E N T I A L S - O U T D O O R - B O X !!! #lRo.msg"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx