7f7821072d79a0deb26affbf11a4e73d86bfae4a3ef05f9ae6d41757b06a3617

Analysis

max time kernel
98s
max time network
143s
platform
windows11-21h2_x64
resource
win11-20240802-en
resource tags

arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
submitted
13-08-2024 21:06

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MailRanger/Mailranger2.ini
Size

368B
MD5

c1345b2daa13a0210930e750b128ed19
SHA1

1dbc019660afede862e7fbeb951eecd03406c84c
SHA256

df0f2439bdd2c48ac97b90d8f86b7532a92e9206dc6c2bf7186e4886fa06bf1e
SHA512

ce48dc7449b3d3f7016d69d514ebb528d96a0e9e8fd3a013d1d14668eb046b8919cb9f55662602542d78ab980b3e66630722402c6c9afe7aa98a3c5f62ae0735

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-6179872-1886041298-1573312864-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

4512 OpenWith.exe

pid	process
4512	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MailRanger\Mailranger2.ini
1⤵
- Modifies registry class
PID:3076

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4512

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads