Analysis
-
max time kernel
94s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-08-2024 07:47
General
-
Target
shaders/gbuffers_clouds.fsh
-
Size
816B
-
MD5
7ffad112fbbbc5ffab8a8e77a808bd76
-
SHA1
be1fca6b1a97fbc5e1a0d338bf143db5877a7d20
-
SHA256
b2e9d1228cd53aa4c285db0eb62786515539165418cfdcca0ec37a028035f8e4
-
SHA512
f2e9214796f406d26294f0b507941d750a0ea6d0c6df9fc8307a24ecc3405855e39795f48906270f65b441b9635c825d23211313c387834623ad7c9ecf0b6714
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\shaders\gbuffers_clouds.fsh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx