Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
08-01-2025 19:10
General
-
Target
x64/031.phpt
-
Size
565B
-
MD5
03744b04fa52a70b8fd2cb07cdc31246
-
SHA1
118c61628b9769e65ef07f0c1567a23849d4ba7b
-
SHA256
5e77b8f2dfaadebaf41a3051f99edbca27e80fff9853116a96d3e5913397570c
-
SHA512
b50837b4e44fcf3fbea9e59452fdea604235cacc7d04e6af534a3d68c1fcb8a13e91a976bda1f2c545f980b2eff8567155aa79fa5cd63d704b73fa873693ad68
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\x64\031.phpt1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx