Analysis
-
max time kernel
94s -
max time network
96s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
26-09-2024 23:22
General
-
Target
ChaosRansomwareBuilderVersion4-main/Src Code/CustomWindowsForm/Form2.resources
-
Size
786B
-
MD5
a0f297d650059197ea79c4e102f4bd91
-
SHA1
f7d100548c2f1412b92140430c612b4d50bae847
-
SHA256
f93baead1ad6a261359ae10d1a12365dbe4feacc1c941ad977cb3675e34669cd
-
SHA512
d72481e1a11ceb61d5e911a21f447dda7b8c43c8724f7066eefb26f7f4d307c6dda9cc4e9442e6312c3d4fe2458ace8b198463ef93d14c0bb7667c46da0634dd
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\ChaosRansomwareBuilderVersion4-main\Src Code\CustomWindowsForm\Form2.resources"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx