2e156957ffdc73801662b89b1f6773434c4d13bb4b9bc1670827e399ad64aa7e

Analysis

max time kernel
128s
max time network
146s
platform
windows10-1703_x64
resource
win10-20240611-en
resource tags

arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system
submitted
02-08-2024 16:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Ransomware-master/etc/Ransomware.library
Size

33B
MD5

4c3afa1c36b5d93cf231f23567fc0320
SHA1

98682eeb359d3e917c2292128f84f5134427e2c2
SHA256

a62d6f70aa846adb172d15706798faca370eadcc0ba8ad35ce5285232e8a501d
SHA512

5c72bfd0b1d948338a8adf72abae79b4130db30650db2e8a5965f761a3f304ae9f14b2f5a3ef50fe1869e475ef5bf0b5ef4a8d746267cb8a65ab086f00ff7dc1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

OpenWith.execmd.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1453213197-474736321-1741884505-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2828 OpenWith.exe

pid	process
2828	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Ransomware-master\etc\Ransomware.library
1⤵
- Modifies registry class
PID:2376

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2828

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads