973ebcffb7706b67b56f9c1b9bae70dd5e0946da3be81273c8a1caac04b63c31

Analysis

max time kernel
42s
max time network
35s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
12-07-2024 21:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Game Setup v7.21.rar
Size

67.5MB
MD5

977651e1816c5b044a87aaaf4d62906e
SHA1

141c3db21ef41cbe38fa16d22bbc42fdc9a27828
SHA256

973ebcffb7706b67b56f9c1b9bae70dd5e0946da3be81273c8a1caac04b63c31
SHA512

43917f821999300e416f62b231e8f726013b84e4502c564cf62a49fde3e0ca846c8dbad29300c82ed8a24bbd442d4a8f13cba1f2553fbaa6ef00d8f04a4f3c9f
SSDEEP

1572864:HfCv8YfFUaYf+MzifCv8YfFUaYf+MzCfCv8YfFUaYf+MzK:HKkY9UalKkY9UahKkY9UaV

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid	Process
2076	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Game Setup v7.21.rar"
1⤵
- Modifies registry class
PID:5108

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2076

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads