Analysis
-
max time kernel
91s -
max time network
102s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
12/09/2024, 20:57
General
-
Target
Angry Birds Maker Demo 0.9.2/Facebook and twitter.txt
-
Size
298B
-
MD5
a75c86679141b46b0433cc2261211c6f
-
SHA1
367bdd53b647c4e392dfe64f144631629c7d4b29
-
SHA256
4f5bd13ea23a4e6dbb14759307af8589fc298d4c3fb275ee435879bb43470abb
-
SHA512
ee846ec113aa39fd2384e83478b7067dfe7acee0453bc4a3feee2861dfeb47d9dea6fa6e14e83765200f3295ee568512245c38849cc237ac4a42075a6efcb1a8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Angry Birds Maker Demo 0.9.2\Facebook and twitter.txt"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Angry Birds Maker Demo 0.9.2\Facebook and twitter.txt2⤵
-