Analysis
-
max time kernel
425s -
max time network
451s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
10-11-2024 20:30
General
-
Target
Wondershare UniConverter 15.6.1.25 Portable 64 Bit/App/DefaultData/UniConverter 15/AccelerateInfo.json
-
Size
16B
-
MD5
996d4f07696a6e034d1b0b2588d62e35
-
SHA1
3d26f6e4c660098d0e4c461898e25ba621faa6f2
-
SHA256
5d1a3c7eaaa826052d6f77bb8d23e229524b38f0f36f54f0ea7ba25248b7a532
-
SHA512
2c543c7589aed3486cabd81051aa59e605df7de0b96682733556e92045dd523caa906259e0c1e53a7628db8abc5e4a0500ec55b1d502bc962e53f154bdfc1391
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Wondershare UniConverter 15.6.1.25 Portable 64 Bit\App\DefaultData\UniConverter 15\AccelerateInfo.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx