Analysis
-
max time kernel
143s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
30/03/2025, 20:53
General
-
Target
custom_Suiika_V1_03/Custom_Suiika_V1_03_4k/Expressions/Hairbuns (high).exp3.json
-
Size
180B
-
MD5
5adb72304534fc1ee6eda0f16a829b6d
-
SHA1
559f75ec18d2cf4905a590b24074e9d1dae445b0
-
SHA256
502716e61b7beb74ce2c57c65f6867a71c7d14547bc61e6a86396c1d64fa9187
-
SHA512
e7188d23e4617ea2dfc59ef216ca7d6994f1f71501c471416c2f41d790463535a26a2eddb26991ef4c4d35c9ac3828651f9fb7072aa0cbdddb6480136472a4c6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\custom_Suiika_V1_03\Custom_Suiika_V1_03_4k\Expressions\Hairbuns (high).exp3.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx