46dff78f5687b905125904a7ed7387d4eac539ed4adae703a950e61718132b82

Resubmissions

03-08-2024 20:12

240803-yza5watgkl 7

03-08-2024 20:10

240803-yxtjfatfpn 7

Analysis

max time kernel
148s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-08-2024 20:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

so7036c.rar
Size

446KB
MD5

9f3cbb783955378db7a59eeddea251ea
SHA1

5b5c6ffe4d6fdb42848cbd4c0fb8918ff34f8b90
SHA256

46dff78f5687b905125904a7ed7387d4eac539ed4adae703a950e61718132b82
SHA512

373c928c346dea8d1f842e89596abd3d279424292f54983b9351857bd1d2f797200b12d46b11d2b9d54d2864e0b90a5a72ebcbc44897827642af4aca33acdb08
SSDEEP

12288:1fQ6gBuJBOMZ5i2FLv9Qx9/Lfj2u0hki6WtMdWVyy:eBuJBK2kzjRWgED

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-355097885-2402257403-2971294179-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4940	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\so7036c.rar
1⤵
- Modifies registry class
PID:3016

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4940

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads