Analysis
-
max time kernel
94s -
max time network
100s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05/08/2024, 03:28
General
-
Target
NanoCore 1.2.2.0_Fixed_Cracked By Alcatraz3222/Plugins/ManagementPlugin.ncp
-
Size
300KB
-
MD5
b612c2c9a6d361a5db14c04ba126119c
-
SHA1
d2b29e235b0f45242088b78313438bdfd51209dc
-
SHA256
b86fe4e126a9748a383a34d615b9598c715f2380c0aad957495c66923902026c
-
SHA512
194d4688935235f3ca686868c9ff53c7945d4e076d4a51fdcbc254bfa1461494766480794c65715bce314256c7cc5268bd6547c937984d3010f54f5a3db4ba9c
-
SSDEEP
6144:auy9l52Cg/8C/OBFAhL01/qR2UJ2Jdd/FK3bCr6dVqZaUyBn:Dy9XYviaVU7UJ2JdddKLLmZaUyBn
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\NanoCore 1.2.2.0_Fixed_Cracked By Alcatraz3222\Plugins\ManagementPlugin.ncp"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx