9e5350ebbbe71cde0e195735289355187d11af0ce0b625cb16ded5f0f3b98744

Resubmissions

21/01/2025, 08:24

250121-ka7wnavmhr 10

12/06/2024, 04:32

240612-e6ft6a1cmr 10

Analysis

max time kernel
91s
max time network
94s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
21/01/2025, 08:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MultiHack v1.7/scripts/gameinfo.txt
Size

192B
MD5

9bdcb8e557e3b582593ccb2c37744512
SHA1

5b75559477719736d251930c22b5cd4e5de457dc
SHA256

095e213be631a498ea4423f9e9d22ff18b3e59175883e075a1275da2a0f5b7f3
SHA512

ef38a967b8c11c5c3cd1602a4324625fbd4118682bd421c36d4b2ee0b30e95251795b8caf08d4f7227768badf1d4005e458d54337bebad72fdb1a287d2c3a058

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3587106988-279496464-3440778474-1000_Classes\Local Settings	cmd.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 3756 wrote to memory of 5064	3756	cmd.exe	78
PID 3756 wrote to memory of 5064	3756	cmd.exe	78

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\MultiHack v1.7\scripts\gameinfo.txt"
1⤵
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:3756
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\MultiHack v1.7\scripts\gameinfo.txt
  2⤵
  PID:5064

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads