Analysis
-
max time kernel
124s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
28-09-2024 17:50
General
-
Target
captainsim-aircraft-m774/SimObjects/Airplanes/CS_B777F_GE110B1/Cruise.flt
-
Size
5KB
-
MD5
ba1247e2ddc258aa18e63e96c8b7886e
-
SHA1
0e1cc2d082466176030acad88cc0a57747595a8a
-
SHA256
13e9dc2582277ebdb49baef78a216e623cca3a3dbd7d0ffcd3fa4facf2df74cc
-
SHA512
c9a842acf61c5c2550831027274e775b193f23e2bd35a3ce3a7ac56c50b8a6412fe800a0c9114f47e571ae595079e460fb6e37772095b78241f99a385ea49a17
-
SSDEEP
96:pEUPE57uoFupFu2FuUXm5t4Pmcyh5iLj4zK2p:a7uoFupFu2FugnPmBh4X4zK2p
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\captainsim-aircraft-m774\SimObjects\Airplanes\CS_B777F_GE110B1\Cruise.flt1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx