Analysis
-
max time kernel
94s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26-09-2024 23:22
General
-
Target
ChaosRansomwareBuilderVersion4-main/Src Code/Chaos Ransomware Builder v4.sln
-
Size
1KB
-
MD5
9e235013f192305fd8d54547b1275562
-
SHA1
a2c2b5fd1e579b2d3c053ce95ce6f9478933912f
-
SHA256
9f1b1ad0c1a8388204d8de9d51bf24db03003966dd9a6a60923532664822c761
-
SHA512
b045d6a24ba57dae17407b1b3b2fd0eb9368611bd2a1936c2f0bf9038a15f237070d01bd2f8a25af75cbcf12b5958def7c955126f5fa18c0b0db0c3b5843858e
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\ChaosRansomwareBuilderVersion4-main\Src Code\Chaos Ransomware Builder v4.sln"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx