75394720eeac13ec96807bcd1b2f71da6eda1ef8976a2ecb1bf715acb4701f85

Analysis

max time kernel
1022s
max time network
1040s
platform
windows11-21h2_x64
resource
win11-20240709-en
resource tags

arch:x64arch:x86image:win11-20240709-enlocale:en-usos:windows11-21h2-x64system
submitted
28-07-2024 00:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dist.rar
Size

37.4MB
MD5

8a8a9030d173404c2a53af079f2b71df
SHA1

d571676f253e9d699fe44049b4b3722b31b129bf
SHA256

75394720eeac13ec96807bcd1b2f71da6eda1ef8976a2ecb1bf715acb4701f85
SHA512

704e7988d3b0bf9155246e19d6654fa40f3e184d917532958678365d763146ea3c52f302d5e3518bb0eab2bce54e0c591d1dcfca11a800ec1158dbc173b2499e
SSDEEP

786432:P9ZQFyhDHLq8tuFiQSVKOFIoZToF7pre6LJQOsdfBJLf2btHjndof0V9:Pg8hDHbtu8QsIrVNemwdfBdf2ZO0T

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3171217504-1685128607-2237314850-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3171217504-1685128607-2237314850-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

4288 OpenWith.exe

pid	process
4288	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\dist.rar
1⤵
- Modifies registry class
PID:4516

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4288

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads