Analysis
-
max time kernel
90s -
max time network
97s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
29-09-2024 18:32
General
-
Target
config/services.json
-
Size
645B
-
MD5
0ac90b3ba62540250e9ad8bb43e0a5d7
-
SHA1
bb1186002911c55d1f89713b72ff185274e119c3
-
SHA256
771162171aaabb5041f59267bf2d2d367a2b5878a42922b0e021ccb56d540666
-
SHA512
3f40a26c12533201b4ec08b81f7eec573420cb62c07c5125e6501866e1a5f48b90a20416d745e16c61548ae1eeafb9b6c58d68044b85677efaba0117df9316a9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\config\services.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx