Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
22/07/2024, 16:05
General
-
Target
dllmain_cpp.hmwxxc
-
Size
688B
-
MD5
d24d301f1043df347af190f31a568a43
-
SHA1
e3fb4b057dc0df0985485f2b51148bbdc66c3739
-
SHA256
35f96db7788189a0cfe84b146d7f0989e6189b0a16e091a74026eff0984cd139
-
SHA512
f357d46bbae6bf8942444438d1515796d33e7e5ddf23728e2f7b206038257db5d60b0247c48c6c247f20c3c62347dafb71b82bf7e7c83203fc3b9a8dab237645
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 37 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\dllmain_cpp.hmwxxc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx