b572b5796a4d51d7f132d3a2e44ce55bc29829de76a7640d99ec098b3f8aff25

Resubmissions

02/09/2024, 10:22

240902-mebp5aygke 3

02/09/2024, 10:07

240902-l5mdwayeqg 6

Analysis

max time kernel
148s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
02/09/2024, 10:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Touhou PC98 Collection/GAMES/th01e.hdi
Size

5.1MB
MD5

5e41f45ff954a6d24faf729d4cdf934e
SHA1

7de3ceea079433df3442783a904994bdf2b1d805
SHA256

7ac6ff1630652cc9ac205bb85779a34486ffe8a902b0356015963f3987e69346
SHA512

f5a4afaa5d0be74eca165b67b58fab1da0d803bae7e95b7acd940ed0cea433c2c4d1d68ee794a0358a03ac6c03e49053381fbd999090f7e17666504da7afff23
SSDEEP

49152:BiRBtVDB2y1Bih8TGc+PaIZN0CbUn6PiSqFqDYWbyk7aJqD5UlruHa9Wbmmk7Z+9:E73Dq8T6PTP7bUn66SDn+/kXQdU

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-945322488-2060912225-3527527000-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4616	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Touhou PC98 Collection\GAMES\th01e.hdi"
1⤵
- Modifies registry class
PID:4984

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4616

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads