44207faa9f807c72588acfafad28923af7fd25fbe7f7103553c821dfcee03229

Analysis

max time kernel
30s
max time network
39s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
05/09/2024, 01:18

Sharing

Copy URL

Twitter E-mail

Reason

Machine shutdown

Report Analysis Logs

General

Target

Sex Mod - Jenny Mod V.2 (Remake and Update) RP/animations/slime2.animation.json
Size

112KB
MD5

e06cd128dda1e8312a8f5abbfdc91670
SHA1

2a58053baca766f2ad722b3a7f2daaf64b761723
SHA256

5b2f6fd2c2e765a8fbe953075da726dc65fed3e6fb1b1213d895d305920faae6
SHA512

8bd8c02976595675530b0ebb99b6de1ab7c6316b2698b8c68c311fd06da93daf6e763cdb941fb3c37cb045d19d36cc4cdf470760728fdbdcd4a833075f6a4298
SSDEEP

384:A4S+Q4IDqM1sbWZGctfmcffY1uqfrfU4oX7tBQONCrvVu4Qy3hhZaNA:rQ4IDqM1sbWZGctfmcffG67tBhNSRQy3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2412658365-3084825385-3340777666-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3236	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Sex Mod - Jenny Mod V.2 (Remake and Update) RP\animations\slime2.animation.json"
1⤵
- Modifies registry class
PID:3880

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3236

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads