Analysis
-
max time kernel
92s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
05-09-2024 12:21
General
-
Target
bin/filelocations.cfg
-
Size
79B
-
MD5
550f662ab7bd788c310a3feae8f216a4
-
SHA1
c8b9835a4f35b8cf3f894a248863cfba77db1bce
-
SHA256
82cdd247d97761fec303c591a06df278b7896c194f4375db1fc176d9e45711a1
-
SHA512
3fe320d9bc542e9ce2f3b177c64d321581be45c00c36df2e2279834aff3b3eec30d64d34ac73fdf360d92b335de3987df6e6ea192e6216baced23cf40ec7f53e
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\bin\filelocations.cfg1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx