Analysis
-
max time kernel
136s -
max time network
167s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
10/07/2024, 22:16
General
-
Target
MelvorIdle-oyunindir.vip/package.nw/node_modules/file-uri-to-path/.travis.yml
-
Size
472B
-
MD5
d4203d9b786d65c8a8fe20bbf7606636
-
SHA1
7b11c619423d7f62e3b9c70c344f62713fc31e9d
-
SHA256
14cfedcd0d39a797fb56787bc06b46d09aa2786084bb0dec49467b9720fb2979
-
SHA512
45e24aafeb77b16a38656989aad43f86d977eb7ac39853a511bf62d95f5f287bae9b6fbbc24fc9241ccf8e0641e8e9a7d87993d74249dde6d5c9b1f030933dd4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\MelvorIdle-oyunindir.vip\package.nw\node_modules\file-uri-to-path\.travis.yml1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx