Analysis
-
max time kernel
139s -
max time network
168s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
30/03/2025, 20:53
General
-
Target
custom_Suiika_V1_03/Custom_Suiika_V1_03_4k/Expressions/Over Body Twintails.exp3.json
-
Size
1KB
-
MD5
439a19bebedd07d88a9dd1d32f34cbf8
-
SHA1
f067fac89d2fab3e18af475f8f482f8a100d8fa1
-
SHA256
041baa70060130f50c52767afaa177dfe8ae9eec80ae0cf672dd8b6b3ff9aecf
-
SHA512
6da05c0ffac8900d7a0ed070218ad20976ad909252c469ed534cb2aedb1aa5b536f0a2172a7c957432a38bd6aa293d6b7f2cff0ce22f5d4229f217981d083ca4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\custom_Suiika_V1_03\Custom_Suiika_V1_03_4k\Expressions\Over Body Twintails.exp3.json"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx