Analysis
-
max time kernel
94s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
02-08-2024 19:39
General
-
Target
!#ÎnS̈tallḙr__8485--!PasSw0rd@$$/MeinSatup___Here.rar
-
Size
15.2MB
-
MD5
95094e8f3178c989f17e7cebc9dd16aa
-
SHA1
81c7d49c41f51a2637db1273136fce16cf90f389
-
SHA256
0c1f3cc7247101a5c007a3aca054c737419e870851d0d11181def458032ca315
-
SHA512
c9add97e2a588752d81f2ce07e6fe0a38585050f34910f217bebabff5922fb0c35b93c2f21ca60faa177c51c99de8e6ab31c90897872f1254258905fca1efd2b
-
SSDEEP
393216:9ZyNrd9UT91ekp/379O4LAaw2RlbyNQOqgOo+oOgIUe+ah/:9ZylT4ykpf7aaTlby2Ogo+Q6+Y
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\!#ÎnS̈tallḙr__8485--!PasSw0rd@$$\MeinSatup___Here.rar1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx