Analysis
-
max time kernel
146s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
27-11-2024 18:35
General
-
Target
Forlorn Executor.exe.WebView2/EBWebView/Speech Recognition/1.15.0.1/manifest.json
-
Size
76B
-
MD5
ba25fcf816a017558d3434583e9746b8
-
SHA1
be05c87f7adf6b21273a4e94b3592618b6a4a624
-
SHA256
0d664bc422a696452111b9a48e7da9043c03786c8d5401282cff9d77bcc34b11
-
SHA512
3763bd77675221e323faa5502023dc677c08911a673db038e4108a2d4d71b1a6c0727a65128898bb5dfab275e399f4b7ed19ca2194a8a286e8f9171b3536546f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\Forlorn Executor.exe.WebView2\EBWebView\Speech Recognition\1.15.0.1\manifest.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx