Analysis
-
max time kernel
444s -
max time network
446s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system -
submitted
27/12/2024, 17:20
Static task
static1
Behavioral task
behavioral1
Sample
Rain Sucked Up.weathersandbox
Resource
win10v2004-20241007-en
34 signatures
900 seconds
Behavioral task
behavioral2
Sample
Rain Sucked Up.weathersandbox
Resource
win11-20241007-en
3 signatures
900 seconds
General
-
Target
Rain Sucked Up.weathersandbox
-
Size
32.1MB
-
MD5
c229aa159dce2877a55cd579ac8edfcf
-
SHA1
6898ef0910f8c346ebcbbdbf840a4198fdd69339
-
SHA256
3d21905f6d25412c3dd3862a9d00e2f0a26631ea061fea39ec8ceaa61a468ac2
-
SHA512
12aa38200fd667e05bd53a963d89f06fdd1ea00e9edb55f18a1cb414e11e73626c97fa778b2b7f76803956d94abc3e813ebd5fa614012c298bd46b99b2d11e6f
-
SSDEEP
786432:Uin4tEg4jPM2+ZpZPEQan/9XEfKqsdLyZc5YneFXI+k2fujsw5tSPyFWdPF/:UiMIj02EZO/9XJ5ywPVPujsGtSPx1F
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-4018527317-446799424-2810249686-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 4440 OpenWith.exe