Analysis
-
max time kernel
94s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26-09-2024 23:22
General
-
Target
ChaosRansomwareBuilderVersion4-main/Src Code/CustomWindowsForm/Form2.cs
-
Size
1KB
-
MD5
83f83090d9da32bae077e54423724a63
-
SHA1
478834da764f3aa651ad4d060716661f9e6bf772
-
SHA256
a836e2779d7357944dabf62196f7b6e5b34ebb1c4f604cf011f261fda686cdbb
-
SHA512
e2f94aba920508cd24ddb0866f70b8db955a9b175b58d9934016a85a80ea86cf1ede36f54aa54b4c801cdf47b2d50fafc74de9c6006de2f7cddca3c63d8d4105
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\ChaosRansomwareBuilderVersion4-main\Src Code\CustomWindowsForm\Form2.cs"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx