Analysis
-
max time kernel
135s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 22:16
General
-
Target
MelvorIdle-oyunindir.vip/package.nw/node_modules/file-uri-to-path/.npmignore
-
Size
14B
-
MD5
8ffcc68579110e56ec109cbf6618b464
-
SHA1
cc16a69ea300506c49a0844bc69745bf8f34cf40
-
SHA256
bfb16fc2dc3b7f24e20981aa586e31d66293c81eb7c2e5d0a9bbb252b13c6271
-
SHA512
b01d704a9c0e939a404f83cccad59a16dfc85df7ad79475ebf9fca6cd4530c6b0e34f16d08185827ca896daed885e3bc7ddb5d0e5979a686d8b8c6e955d5aa96
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\MelvorIdle-oyunindir.vip\package.nw\node_modules\file-uri-to-path\.npmignore1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx