Analysis

  • max time kernel
    92s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240802-en
  • resource tags

    arch:x64arch:x86image:win11-20240802-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    02-09-2024 07:29

General

  • Target

    magik remake/WindowsFormsApp2/Form2.cs

  • Size

    3KB

  • MD5

    00347712af0aff05d459c72a00d4c7fb

  • SHA1

    ad45023d141e76b99e4ebf93b62f44f55097eb69

  • SHA256

    33b09d50655d4ebd62f4b92f71fd9e06717f4c2e61ab379c9d8b6d4ddc8b4d90

  • SHA512

    c24cc3dc26c14ad3e138efb048b1c610c0740767fa375065ad6a5c080ed577c58f71ed30f81faa882e9ff01661361b90cebb62e9f2b369cf4d0ecc362b770846

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\magik remake\WindowsFormsApp2\Form2.cs"
    1⤵
    • Modifies registry class
    PID:4040
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3336

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads