Analysis
-
max time kernel
96s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
09/11/2024, 20:17
Static task
static1
Behavioral task
behavioral1
Sample
.sh
Resource
win7-20240729-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
.sh
Resource
win10v2004-20241007-en
3 signatures
150 seconds
General
-
Target
.sh
-
Size
40B
-
MD5
37d4ae19c5c206383cf5503350b447a2
-
SHA1
9ed7c3dc529b2a6504a900982ae7c21c73517ad9
-
SHA256
b40d9d5622c15644509d9685824abe37abda9428624c63560b058d4fbdb87848
-
SHA512
2d78d3af4637751e6bef524a836045b0b4d121faebbf03e9180eb102e7185964739c3849cde6709ddf298fa0c20432d2fbf473dc2d83be7123a7d247cdd673eb
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1045960512-3948844814-3059691613-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1045960512-3948844814-3059691613-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3260 OpenWith.exe