Resubmissions
17/02/2025, 13:54
250217-q71fqszket 1017/02/2025, 13:54
250217-q7q73azjgq 617/02/2025, 12:50
250217-p3cnfaypen 10Analysis
-
max time kernel
3s -
max time network
5s -
platform
windows10-ltsc 2021_x64 -
resource
win10ltsc2021-20250211-en -
resource tags
arch:x64arch:x86image:win10ltsc2021-20250211-enlocale:en-usos:windows10-ltsc 2021-x64system -
submitted
17/02/2025, 13:54
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
B6534569C66B247263E086F3D0141B3F1E2B86C69423379FE8EB0480CE2123F2.apk
Resource
win10ltsc2021-20250211-en
3 signatures
150 seconds
General
-
Target
B6534569C66B247263E086F3D0141B3F1E2B86C69423379FE8EB0480CE2123F2.apk
-
Size
550KB
-
MD5
a6442b382d8ddba47390bbd18fd3d1bd
-
SHA1
8564d9093e51b7039aaa183901411163e913da2f
-
SHA256
b6534569c66b247263e086f3d0141b3f1e2b86c69423379fe8eb0480ce2123f2
-
SHA512
1ed5948b73533904f26f76ac04dffa17c930a89b4a062b79a102251d89cfef33233a413f710c4637016124c6dde787df0438e98a0e5ce3f7eb9a9aa115317ab0
-
SSDEEP
12288:l/u2OaK0C2n3TdlMkF2EOW8vEdoiWepD/DREjDXB:xN40znDdPRfbW5ozDgx
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2855353826-2127742941-242596738-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2855353826-2127742941-242596738-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3888 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\B6534569C66B247263E086F3D0141B3F1E2B86C69423379FE8EB0480CE2123F2.apk1⤵
- Modifies registry class
PID:5148
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3888