Analysis
-
max time kernel
146s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
01-10-2024 21:43
General
-
Target
OverwatchWebcam Win64 v.0.4-97/OverwatchWebcam_Data/RuntimeInitializeOnLoads.json
-
Size
2KB
-
MD5
0f53f5695521a1324677395209a9095f
-
SHA1
ce3a07079ea22befdc0eaaae54c389c759e5a649
-
SHA256
f9eac363e79a5052c2c5b8fc118b60aaa8de3e043c84ed7546254e6986964971
-
SHA512
5666b0aedff955287dd9c7b66eb9c73b6a7b50890325b8ab24d0ba55b24122f52b42cc9861f75c76598828fff69d1af7166011d0a5e5fba760a26f0a8702b90c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\OverwatchWebcam Win64 v.0.4-97\OverwatchWebcam_Data\RuntimeInitializeOnLoads.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx