e7540e416771a4532807a975e55c934110fd0d1f906d08a400b133e94bebe4c9

Resubmissions

11/09/2024, 18:46

240911-xe5y3swfpp 7

Analysis

max time kernel
148s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
11/09/2024, 18:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]/Dolby_Atmos_Setup_and_ControlPanel/Readme.txt~
Size

360B
MD5

73c03b6d4f97a68da6bd76cc2da9b054
SHA1

dbc4f2fdbc108fd96a6bbecb958d3d2ad2a4f503
SHA256

0fec6abda33042e7a9cb9b38ef36aef21103b46822f13942a72a3443a0d6bf4e
SHA512

61e64fecf01cbf72c9d34a472611758f032ac43bc049679259ed0b6a2496e14e6b0c3f987e066388b17abec7d8da34a4e5647c27a81d1f79db8c0e78156d1276

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2718105630-359604950-2820636825-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3344	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Dolby_Atmos_Setup_and_ControlPanel [PeskTop.com]\Dolby_Atmos_Setup_and_ControlPanel\Readme.txt~"
1⤵
- Modifies registry class
PID:2104

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads