Analysis
-
max time kernel
90s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-08-2024 20:19
General
-
Target
JJS-UI/resources/app.asar/node_modules/responselike/package.json
-
Size
559B
-
MD5
d735ae0c9e848375062ffe476ee02b31
-
SHA1
79f0aaa77e79a3223bebe564cbd0601eeeced98d
-
SHA256
00df95abcc8e712dc802aa90bb98bd4763695254dbcd1e54c0240c2331717a52
-
SHA512
c5ed7f1c4dfbcfb25ac9630516c8f468e83f0d3e9bab7fb27139b368215b733d1c99c260570a4305272b8b3c5886acfc7d88139acc00a57c9dada66eac873eb4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\JJS-UI\resources\app.asar\node_modules\responselike\package.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx