9d57217b740a9dba870e96db446745bc008e57a7356d6ace1f3c5c7059a22200

Resubmissions

29-08-2024 23:36

240829-3lmnzaxalh 10

29-08-2024 06:31

240829-g98epaxgjh 10

29-08-2024 06:23

240829-g5jkrszckn 10

Analysis

max time kernel
132s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
29-08-2024 06:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9d57217b740a9dba870e96db446745bc008e57a7356d6ace1f3c5c7059a22200.dex
Size

4.9MB
MD5

9fed9bb00615b90f79a94e70e9aa14f9
SHA1

373338ac03ea5054a35722f1725c4ac9492e9833
SHA256

9d57217b740a9dba870e96db446745bc008e57a7356d6ace1f3c5c7059a22200
SHA512

0f27bc18978eced5e464782297fc398d12b8257ce317478fcdee7566803856fa9929f266e5c9749e0eddccb22c8e4edc90eed9e7ce53009eee040dfc763812d0
SSDEEP

49152:FwQtBaSIQG37+UMLmpSyFrqHaWIqbWJlPhjjK62pyEbPzWYqLoQEp9Z1uTMB9GPL:qQtBaSsyUnSyp8WJl9K62Clo1uAzK

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1302416131-1437503476-2806442725-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4016	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\9d57217b740a9dba870e96db446745bc008e57a7356d6ace1f3c5c7059a22200.dex
1⤵
- Modifies registry class
PID:4736

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4016

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads