Resubmissions

17/02/2025, 13:54

250217-q71fqszket 10

17/02/2025, 13:54

250217-q7q73azjgq 6

17/02/2025, 12:50

250217-p3cnfaypen 10

Analysis

  • max time kernel
    3s
  • max time network
    5s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250211-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250211-enlocale:en-usos:windows10-ltsc 2021-x64system
  • submitted
    17/02/2025, 13:54

General

  • Target

    B6534569C66B247263E086F3D0141B3F1E2B86C69423379FE8EB0480CE2123F2.apk

  • Size

    550KB

  • MD5

    a6442b382d8ddba47390bbd18fd3d1bd

  • SHA1

    8564d9093e51b7039aaa183901411163e913da2f

  • SHA256

    b6534569c66b247263e086f3d0141b3f1e2b86c69423379fe8eb0480ce2123f2

  • SHA512

    1ed5948b73533904f26f76ac04dffa17c930a89b4a062b79a102251d89cfef33233a413f710c4637016124c6dde787df0438e98a0e5ce3f7eb9a9aa115317ab0

  • SSDEEP

    12288:l/u2OaK0C2n3TdlMkF2EOW8vEdoiWepD/DREjDXB:xN40znDdPRfbW5ozDgx

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\B6534569C66B247263E086F3D0141B3F1E2B86C69423379FE8EB0480CE2123F2.apk
    1⤵
    • Modifies registry class
    PID:5148
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3888

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads