Analysis
-
max time kernel
1320s -
max time network
1145s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19-09-2024 15:54
General
-
Target
doc/ttfmetrics.ph
-
Size
1KB
-
MD5
f5f386d371dba3af86a15e4f939bcca0
-
SHA1
56094441cb4808af18a576ad1d153db8d46da46a
-
SHA256
a425fd3725aaff6441821f4d301221295606ce9e7528d4835d5a497059c08c95
-
SHA512
0e014958ca2bc136c293b3a5f78eb7160a0baef0b4cfdbc3bf4946ab187062b7001d27d35c5f85b4b391c29a60a27d7fd237007855cf489d7fbd19f26977ba25
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\doc\ttfmetrics.ph1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx