Analysis
-
max time kernel
87s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20250314-en -
resource tags
-
submitted
30/03/2025, 20:53
General
-
Target
custom_Suiika_V1_03/Custom_Suiika_V1_03_4k/Expressions/Ponytail.exp3.json
-
Size
1KB
-
MD5
262c1d334381e02a092c3d6858a27c34
-
SHA1
7d6206dbc92b2420c319315f9d028d9c64a07875
-
SHA256
ab4f21ecd7ce3bdcffba05be67a55b5ab23e2f212c4ea4bf2cc3d464200e6744
-
SHA512
d3977027aed61bac4b20900a813ca4ab50ca9bcabb188647468e43ef829894659c6bf18178af589af17078dd88a825a21e011eb6df43d53d188f0be84af3bd46
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\custom_Suiika_V1_03\Custom_Suiika_V1_03_4k\Expressions\Ponytail.exp3.json1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx