Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
27-11-2024 18:35
General
-
Target
Forlorn Executor.exe.WebView2/EBWebView/Subresource Filter/Unindexed Rules/10.34.0.57/manifest.json
-
Size
116B
-
MD5
2188c7ec4e86e29013803d6b85b0d5bb
-
SHA1
5a9b4a91c63e0013f661dfc472edb01385d0e3ce
-
SHA256
ac47cc331bb96271da2140941926a8accc6cb7599a6f3c17bd31c78f46709a62
-
SHA512
37c21eaff24a54c2c7571e480ff4f349267e4404111508f241f54a41542ce06bcde4c830c6e195fc48d1bf831ed1fe78da361d1e43416cfd6c02afa8188af656
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Forlorn Executor.exe.WebView2\EBWebView\Subresource Filter\Unindexed Rules\10.34.0.57\manifest.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx