090f2f668799ba806d6e5ec31bf7ff1fd39b7260f129f4d6a944decae0f04df9

Resubmissions

17/07/2024, 09:50

240717-lty9asyclc3

10/04/2024, 23:28

240410-3fzfkseb9910

Analysis

max time kernel
99s
max time network
133s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
17/07/2024, 09:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Exitlag Cracked 16.1v.rar
Size 4.2MB
Sample240717-lty9asyclc
SHA256 090f2f668799ba806d6e5ec31bf7ff1fd39b7260f129f4d6a944decae0f04df9
MD5 451806c60f6f0c52cbb49026d4e14d89
SHA1 8463cb0297d3e3b9bd28713d1ed75ef4d78b887a
SHA512 e59a94c974f32d2e275d97add0a1eac8fdf794db008f0ecd69835ff120afd93e446852849e30f1bf598c57305891cf7d536b645e91dccd01c07dfe2679465cff
SSDEEP 49152:uMKPSGs1uhQvK+8UU2JyWIpeHWf/j6fVThnaYvWG/W7FWmOEa4u2Q/L16JyFH7QE:JAsli2UpcWf/jcs3FVQh603pUrAeA
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3866437728-1832012455-4133739663-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3866437728-1832012455-4133739663-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2828	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Exitlag Cracked 16.1v.rar"
1⤵
- Modifies registry class
PID:1836

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads