Resubmissions

21/07/2024, 19:41

240721-yehdfs1epe 1

21/07/2024, 19:41

240721-yd3m1a1ene 7

Analysis

  • max time kernel
    149s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240704-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system
  • submitted
    21/07/2024, 19:41

General

  • Target

    src/css/bootstrap.min.css.map

  • Size

    418KB

  • MD5

    234d916a5336ae521b932c6c7d373467

  • SHA1

    21a60d8887bcccb6a6705afcecc9eaa7f02f4f5a

  • SHA256

    5ab28efe2b9b0e054221b966c9b1cc18d0d68cc0d44c7c6c32f9fb34672163cc

  • SHA512

    71062456cf3532430e50863c15b573bee007156a4c6e1dcea4d08e96f25f713f184b709eb4eeb9df7cf59351cc35b8313d906d36cf0ed7683ca4a24c4a8d5d8b

  • SSDEEP

    6144:iUe2aZgPb2PH5lliWLuxjoVgrf8ZhGW4STALycfE6xNcVrRQ:cZgbWLuxjoVgrf8ZGSTALycfE6xNadQ

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\src\css\bootstrap.min.css.map
    1⤵
    • Modifies registry class
    PID:4068
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:928

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads