Analysis

  • max time kernel
    144s
  • max time network
    159s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    23/07/2024, 23:41

General

  • Target

    BorisFX Sapphire OFX/Win64.lnk

  • Size

    1KB

  • MD5

    34ddc4346b7a535ccd3c6c1ecb8bfa1e

  • SHA1

    d4c55048a801642197a6b21193bf2d730d1918ff

  • SHA256

    f9e7984280a67b1516d0f30de652c5efa129e9b23123bc5c529d4dfb5a106372

  • SHA512

    f90f0930a80033f65281418446badc2f5399de4cae0b4a68ee4457464440ac39cfcb91e4960fbe6b6cd44de09d8871ece351b0e5babba663be6df238617db589

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 5 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\BorisFX Sapphire OFX\Win64.lnk"
    1⤵
    • Modifies registry class
    PID:4400

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads