Analysis
-
max time kernel
31s -
max time network
143s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
02/08/2024, 23:33
General
-
Target
assets/minecraft/models/item/diamond_shovel.json
-
Size
677B
-
MD5
7897d2d8543282ad7fd35b2af3d00ec4
-
SHA1
f1c0564259884a3c52833a52422219dfc890673e
-
SHA256
64d868a3ef4203f562aeb456862559d47faa04f828eb685b244d255a3a963d59
-
SHA512
e61c36ab3885ad648f27d17fa013c583ddefe36823050e5ae7f10b99128c5a2fdc539c99cf0aa8365db36cae2d90f7c1e94a09838cb6e95c80cc951584f6c6f2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\assets\minecraft\models\item\diamond_shovel.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx