Analysis
-
max time kernel
1322s -
max time network
1147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 15:54
General
-
Target
autoconf/clean.sh
-
Size
118B
-
MD5
bb3793ad1ae2be347b30b30d5b3eb508
-
SHA1
4c84939a043238bddb9473da631932452914a005
-
SHA256
69cb5e5467ee9cf38121ecddadfd5faa4dad5e6937972e296adbe7407adf1622
-
SHA512
73d7aede459f4f6170513787e55a97799ee46a32d587dea64b1cbe0107e496b1cf070bdeeae4fdd3eeff70075072d5f7f04f6fd4a3f14b84f6d7361c3159ae0a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\autoconf\clean.sh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx