Resubmissions

30/10/2024, 14:21

241030-rpcgmavhlq 8

30/10/2024, 14:19

241030-rnce8stnbx 8

Analysis

  • max time kernel
    137s
  • max time network
    146s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/10/2024, 14:21

General

  • Target

    3.reg

  • Size

    582B

  • MD5

    d95789a18cf895b23e2ab8516ff9e56a

  • SHA1

    b79b3245f4d592cb5ed3037faf0ea2ac33aa686e

  • SHA256

    df213e4acfbe3024e83dfc6cf26ceaa9ded1d2289db97a457917ae261c55adf0

  • SHA512

    cbe5330e691679b0d9e3dd907eabfb14a5aad5404e15eeab51d40ec0aafd0839a7ea2eff9c9f58d1592b9384844a2b0079debf58331ee577294ce01f8986c425

Score
8/10

Malware Config

Signatures

  • Modify Registry: Disable Windows Driver Blocklist 2 TTPs 1 IoCs

    Disable Windows Driver Blocklist via Registry.

  • Runs .reg file with regedit 1 IoCs

Processes

  • C:\Windows\regedit.exe
    regedit.exe "C:\Users\Admin\AppData\Local\Temp\3.reg"
    1⤵
    • Modify Registry: Disable Windows Driver Blocklist
    • Runs .reg file with regedit
    PID:436

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads