Analysis
-
max time kernel
134s -
max time network
106s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-08-2024 02:10
General
-
Target
Settings.json
-
Size
1KB
-
MD5
84010567e6e5c6605e32aedb405bca7f
-
SHA1
39015af2551f4b362d4ec85feae36967229e9028
-
SHA256
32377b3c4b140cf3d918422cbb926352d95de759c42cecb95a8f1bd14b128d69
-
SHA512
a2d4f3845b91704a89e9658aaee5d34b7d004e6ba0d3e59fd73aa895f7ecc79baacaa8b299646897aca472d00f23ecbb9e61da8a0eccacde1e696f82a1ce1b14
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Settings.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx