Analysis
-
max time kernel
424s -
max time network
427s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
12/08/2024, 13:02
General
-
Target
__MACOSX/IM NEVER LEAVING!/._ILL ALWAYS BE WITH YOU SOOS.txt
-
Size
574B
-
MD5
99244baf0fb11f80c5055fc97304b34a
-
SHA1
b837c50e411acb14c6d93c985ed564b3c45bdb73
-
SHA256
4e862408c0ea0c86e79caf27ffb6cd7c37b5949ad69101b24762d05db3bc795d
-
SHA512
21cb9ba72c952e019b27248b44b51c596d6479eaa65b57d6542c6038a4e5151d39e2e275546335e38fd3572828de1032969f2a4442ecef3a587a23d1c9190bda
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\__MACOSX\IM NEVER LEAVING!\._ILL ALWAYS BE WITH YOU SOOS.txt"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\__MACOSX\IM NEVER LEAVING!\._ILL ALWAYS BE WITH YOU SOOS.txt2⤵
-