Analysis
-
max time kernel
148s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
01-10-2024 21:43
General
-
Target
OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/StreamingAssets/UnityServicesProjectConfiguration.json
-
Size
1KB
-
MD5
ae7b42d887960485453f5c1089d14c0b
-
SHA1
e83af71e4ac0d971f77a0362ee44c7e50ea92219
-
SHA256
56d63edcecd2c75f08f22583a3033fca7cedb02aa3f7022f65322718586da2d0
-
SHA512
dddad9372d25b5aad9d3ab612b991c5c4792a54fa2de10bd1fe7260944e78e8f6802ddfea9de3471639f104dde448d5f56edef2c6bf333dcdb721e295eade3a9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\OverwatchWebcam Win64 v.0.4-97\OverwatchWebcam_Data\StreamingAssets\UnityServicesProjectConfiguration.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx