Analysis
-
max time kernel
143s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
29/08/2024, 17:33
General
-
Target
release 2.21v.rar
-
Size
79.9MB
-
MD5
cbca16a30d933481b2b42ad9ebf04e6c
-
SHA1
68a9ead8c6c56bf8796a7c8483f3870f566696cd
-
SHA256
3953661397d96baa773cf45497e1f8216046663172924fed0c8f0fc5b32bc18c
-
SHA512
fa1656511758a4edeaea838d3847cd8f588aeafe72557fb0ea442418c874bd117945e2cdc642173d96471d7d418f20d603ae21a91b48c20abcc3fdc758b99c29
-
SSDEEP
1572864:Xf54DKqY0wZE3HMkvfuT0m0IcAZmu94KqPyaBL94xDT7vgUA33ZtW:hGKr+XBO70vu94FIDT7vBA5o
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 9 IoCs
-
Suspicious use of SendNotifyMessage 8 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
Suspicious use of WriteProcessMemory 9 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\release 2.21v.rar"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\release 2.21v.rar2⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\rundll32.exe"C:\Windows\system32\rundll32.exe" C:\Windows\system32\shell32.dll,OpenAs_RunDLL C:\Users\Admin\AppData\Local\Temp\release 2.21v.rar3⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Program Files\VideoLAN\VLC\vlc.exe"C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file "C:\Users\Admin\AppData\Local\Temp\release 2.21v.rar"4⤵
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
-
-
-
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
208KB
-
Filesize
992KB
-
Filesize
96KB
-
Filesize
92KB
-
Filesize
68KB
-
Filesize
92KB
-
Filesize
2.7MB
-
Filesize
68KB
-
Filesize
116KB
-
Filesize
68KB
-
Filesize
2.0MB
-
Filesize
144KB
-
Filesize
72KB
-
Filesize
348KB
-
Filesize
188KB
-
Filesize
68KB
-
Filesize
160KB
-
Filesize
68KB
-
Filesize
140KB
-
Filesize
96KB
-
Filesize
348KB
-
Filesize
16.7MB
-
Filesize
68KB
-
Filesize
496KB
-
Filesize
412KB
-
Filesize
192KB
-
Filesize
96KB
-
Filesize
68KB
-
Filesize
108KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
68KB
-
Filesize
76KB
-
Filesize
96KB
-
Filesize
132KB
-
Filesize
260KB
-
Filesize
68KB
-
Filesize
788KB
-
Filesize
76KB
-
Filesize
68KB
-
Filesize
176KB
-
Filesize
68KB
-
Filesize
88KB
-
Filesize
196KB
-
Filesize
76KB