Analysis

  • max time kernel
    89s
  • max time network
    95s
  • platform
    windows11-21h2_x64
  • resource
    win11-20241007-en
  • resource tags

    arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    18-11-2024 19:35

General

  • Target

    Sys/GameSettings/EAI.ini

  • Size

    540B

  • MD5

    9228eacacededff8651ddc4dec18a628

  • SHA1

    30aeaf30e7d8f9933c7351ae17a0464be1e1639a

  • SHA256

    03eda51bf9556b4d3e96648a6ba22d15c4d9940922e41b0e096d9d83c8367a78

  • SHA512

    1ff5cc26e1cf5f65aa7c788c178e2f797321d2e910d707690b46a5d2b1368e382df13b0d6212414755d24bcdfd34c0dd2c5ca98fa3d19e97d176986924fc6c2f

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Sys\GameSettings\EAI.ini
    1⤵
    • Modifies registry class
    PID:4348
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4132

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads