Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-10-2024 12:45
General
-
Target
db.json
-
Size
394B
-
MD5
0db367a2b2be9a60bc78568e5c2747ad
-
SHA1
df10acdb237c168a8ebdc66551aeb7c6679a93c7
-
SHA256
8e2467680b3183de59833855e14d40240c66fb41b4c405b12ad6cc83f241af0c
-
SHA512
65d89b8b7e2f38a5a43d3d5b3a5d56245e8c9cac28d3a4567cc015329d1e6b00bdad9116450da2b0dbcaebef607b4029cea0274023b81ad3dfeb804f6c832c26
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\db.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx