Analysis
-
max time kernel
421s -
max time network
1144s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
-
submitted
11-07-2024 17:45
General
-
Target
qemu/linux_boot.bin
-
Size
512B
-
MD5
083168795fc3a90d48d8dcaf7a5eb3b4
-
SHA1
2d6584b5e91e8f9f5e5115a01555f5085e41bd54
-
SHA256
42f95b2f2bf136e531ad359613d8637f06a5d823164314675adaf50c658b7281
-
SHA512
c34bf99f65c471be36ed8f76955899cca4e62150671cf547c8f5d6200f253d6f19f2496e95f54e74989e6b78515e97c032b722d551855010435dbc1d47291039
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\qemu\linux_boot.bin1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx