79d746ef667014e9232dc4bc41db2e8a040262bef2935f854ba4ba7314a52d4d

Resubmissions

19/07/2024, 21:15

240719-z4cpyazfpp 8

19/07/2024, 21:09

240719-zznawatdqf 3

Analysis

max time kernel
116s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
19/07/2024, 21:15

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

TheBindinofIsaaRebirth.v1.05/resources/packed/animations.a
Size

644KB
MD5

77127a623a3db1954dcbed5d3e3fe3ea
SHA1

93f338f0f9c93fc82cf89d4f484d2d58d240271e
SHA256

182e071934fc2d4600506bb326bb8d3946861bfa7ce3c4404d524d68ada8abf5
SHA512

18f293d81592a925e29b08a306931556462ea332bcf65c8fabb32f50fdd14dce3b7384c7835a3d3f7a5f823c7230d13d1c4b4b0212d5bf93dc4f1d2c0fd326cd
SSDEEP

12288:gzvBvDQbMfe/PjBXd4glYDGqBW08w+3IuQhgmwSoAFWjLWHClSsgOuC:2BbQxLBa5Bowayh0AwLWHCIVC

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3419463127-3903270268-2580331543-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3419463127-3903270268-2580331543-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1776	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\TheBindinofIsaaRebirth.v1.05\resources\packed\animations.a
1⤵
- Modifies registry class
PID:3080

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1776

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads