Analysis
-
max time kernel
147s -
max time network
151s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
14/01/2025, 15:35
General
-
Target
New folder/lossless scaling/__HOW TO CRACK.txt
-
Size
68B
-
MD5
88ad4289df801383d10899bcae6eb317
-
SHA1
ccc4a249545f9e0f48932d982b2320a79791483f
-
SHA256
867a006aeee7cbfe6b44ed9d8f412e3104bf077b7ad49aa642f166095c37d1ee
-
SHA512
0eec25b34993e75bea0981f87df0377244a75acf404f6159030240032f34f0858807e89423a07ef338573c84895e1f7faeb8c1dfb964c51e1364375648954124
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\New folder\lossless scaling\__HOW TO CRACK.txt"1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\NOTEPAD.EXE"C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\New folder\lossless scaling\__HOW TO CRACK.txt2⤵
-