fbf6790378e669f76a85fa6f42e04a01fc7abc72679aa54a5992c3b129358a8d

Analysis

max time kernel
140s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
25/07/2024, 13:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

TheMEMZ/.git/objects/pack/pack-4ea3396b1580523e2fd09fe8a602f32bf7d5edfe.idx
Size

21KB
MD5

7da4214ad8bdd0faf4c477864c92a529
SHA1

16efded8314a6a4c74f94c79bd84a45b092cd9e1
SHA256

517a08abf5ff4d30b38cd77bdf6d13ece20d04c2c8341a543441bdff44521d60
SHA512

6d79597c91842cffc72cb6cd46ac5850f38105baf3d94d3ab5263b98dae10a7422c67604a9ff50fb1de120c6ea9d982cf3cf2e3cdf8be231d0672b649ebe1db7
SSDEEP

384:0iuY2SkrYBTESB2BpLS9oIKBY4AJtfpLlb5kU7t3+QWuOzvQ7Lgm2sR+QMNT:4YjsoE4qpLSGIKBGRfBOkwuL2sR0NT

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2990742725-2267136959-192470804-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4468	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\TheMEMZ\.git\objects\pack\pack-4ea3396b1580523e2fd09fe8a602f32bf7d5edfe.idx
1⤵
- Modifies registry class
PID:4932

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4468

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...