Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
27-11-2024 18:35
General
-
Target
Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.fingerprint
-
Size
66B
-
MD5
2596b3b177322eaeeab4c735348b2385
-
SHA1
b563fe1496d5d2b336f310288604d5c1314c7bbd
-
SHA256
b406602a37dfb0408ade2a6d84071a70d3b040c15902da60dafbfa818370669f
-
SHA512
258ced5170edb34b83cc97a04ced98299c5cfad838989ce7dcb32bf8e93e5d1ae8b15eed71346a323075f4077743a6db22cb26ea00a40720134a60ab4013e955
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Forlorn Executor.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.57\manifest.fingerprint"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx