Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
16-12-2024 09:15
General
-
Target
.reloc
-
Size
4KB
-
MD5
7531f98f48bae981154531be7b0e3ec6
-
SHA1
154defc8109ba0ee2834f575c61ca810c198bf2d
-
SHA256
5451208cf24050fe1627207138157fd21e4cd3adea6ce5e865e9b03324b6c6c2
-
SHA512
a8d9ec0b2d4e1311af7ec0409415053cbd9f912b4e6cec2337db08a4607f82aa3f713481484ce7d02c4d68b6354b7a87b5265f70a3071bf5be56e1b409910555
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\.reloc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx