Analysis

  • max time kernel
    149s
  • max time network
    162s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20250314-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20250314-enlocale:en-usos:windows10-2004-x64system
  • submitted
    30/03/2025, 20:53

General

  • Target

    custom_Suiika_V1_03/Custom_Suiika_V1_03_4k/Expressions/Glasses (round).exp3.json

  • Size

    180B

  • MD5

    09b7cfd2e2032336189a5a307c75667c

  • SHA1

    3240fba0046ca94c5c98e8272edf3d86926c3298

  • SHA256

    43a73a1ad9787aae0f77c09084bbcf0b933b373f2b41b6d0c668736bed4d1bd2

  • SHA512

    5ca3f641aa53bd1251e2b76cbf15dfc596fcae57cbc4bc6e12800c205e44183900fad8eea3999f39dff431d7064e9f527a0626205da0b473630713b5fb9cbc68

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c "C:\Users\Admin\AppData\Local\Temp\custom_Suiika_V1_03\Custom_Suiika_V1_03_4k\Expressions\Glasses (round).exp3.json"
    1⤵
    • Modifies registry class
    PID:4956
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:4872

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads