Analysis
-
max time kernel
432s -
max time network
434s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
12/08/2024, 13:02
General
-
Target
__MACOSX/IM NEVER LEAVING!/._.ds_store
-
Size
120B
-
MD5
b9a94cc8f4aac450fb21641eaf065c6d
-
SHA1
0bed7e90c2bade9763fa18f1fb4441d31f91c87c
-
SHA256
2f380f4a3d05a8d90c2106f50da75064e9ce57a598599dc5404f8f69a0223aa9
-
SHA512
f1e82573db1da08be076ab30e7d8cff350e15d06765e1bb74e313cf5f93e1df6921893a3589df51e6b18538c21a9df6d3f23fead170e9b3c02993f5b5d4a2f4d
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\__MACOSX\IM NEVER LEAVING!\._.ds_store"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx