Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/08/2024, 03:28
General
-
Target
NanoCore 1.2.2.0_Fixed_Cracked By Alcatraz3222/Databases/network.sqlite
-
Size
5KB
-
MD5
6978532802ded7b494a7217e0cdda8a4
-
SHA1
70a4239a69c2dcc38689a95f35bcfbff74c73b77
-
SHA256
418e070cb49cad847066a8166c26843d8b29210963f4379b9218969415a3326a
-
SHA512
ffd78433e0710684dbb9df606a91dc6efbb0d663aa36199dfbfa1c3645ce1697fb6012620c28fedc87f7aed80d51c5bb4ca78fe5093a26f78fe1320571720465
-
SSDEEP
12:HLykD5FAg9Gjiagk2mK5avVxsiLC9l37mz4WA9G88PkaGWWEg6:ryU5F4jiTk2xmG37cWwb8Yg
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Fixed_Cracked By Alcatraz3222\Databases\network.sqlite"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx