Analysis
-
max time kernel
93s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
-
submitted
01-02-2025 23:59
General
-
Target
config.yaml
-
Size
3KB
-
MD5
35e9ba6ba05d63fa3cf23f9dd218712c
-
SHA1
ab22b8cd23c175bee212f9a766f197a2738e6a72
-
SHA256
068a59d20fec3dc3b0d5bedf7f6a2c686d505dec16b8988198c9d5c47f5e3718
-
SHA512
298618a2933ccd381cfee84637c51b976d0a18507a06c7fe278f1a5da50c9235f870216f3f150bcf49c89c9afa7485ddb83a68273ff15cd7a6abbbf2dc7c9fd0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\config.yaml1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx