Analysis
-
max time kernel
96s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
02-01-2025 23:56
General
-
Target
250103/random.sh
-
Size
1KB
-
MD5
95bbe14ac6fcdd039906129c5a23d596
-
SHA1
4ecce0daeb15c10384e784cc98aca114c50ad2c4
-
SHA256
ee0faf107bf34a08c98f720ef0ff6225b14df94b50baa2d827451ad04f4d5971
-
SHA512
d0240667d4c2eba2f1545e0bed499fffdd73c6a2d339ce338aa24c245b3d36700af374460b8a296365e7faf03c50f54936f24a686eaa9ea5d287a87f7e7b4bc3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\250103\random.sh1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx