Analysis
-
max time kernel
91s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
29-12-2024 23:10
General
-
Target
SugarLogic_#teamtnt_by_@r3dbU7z/MountSshExploit.sh
-
Size
1KB
-
MD5
161e7ae70dfea47d17397e5549ef675c
-
SHA1
e2df43d8d12d90ba9b49e8bc2187431adda7358e
-
SHA256
da4a2ae560a6fad9c80182212da3440d678264b4d2d440c94168e36a530490a5
-
SHA512
b7af2215f5bcc7cc9a626c35269890a23f7e86891c309aadd2a04c5961dcbb82c9f1ebea93db8090f93d2b06fba53a8d26bf80d3a74a6fec27ff5e80fe52ed47
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\SugarLogic_#teamtnt_by_@r3dbU7z\MountSshExploit.sh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx