d50ad141854cca0a356de2c38f533ae4e87bb9379d96f656f12fb75c94024cc8

Analysis

max time kernel
314s
max time network
1592s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
02-07-2024 01:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Voicemod Pro 2.6.0.7 (x64) Multilingual [PeskTop.com].rar
Size

67.3MB
MD5

2248fe5369f657ca0b0f0ce3b4ab5a38
SHA1

9b4bb1effbba647c2de42c8f9b111ebffccdb7ca
SHA256

d50ad141854cca0a356de2c38f533ae4e87bb9379d96f656f12fb75c94024cc8
SHA512

7a1f865bfb82c5f8b9404ba83d75e161a9853ebc4087004c733ecdb35306ef27af11e0811f84b00b2208ed305f3753203baa18f5212c5c9a6b8a4e85f0725b2b
SSDEEP

1572864:hSN6XCY6x7zzkWr1g5DxqgesWOWf/tOyL4trXEOwL:Ewp6dzzkr9QZsWMrXu

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-1687926120-3022217735-1146543763-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

3472 OpenWith.exe

pid	process
3472	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Voicemod Pro 2.6.0.7 (x64) Multilingual [PeskTop.com].rar"
1⤵
- Modifies registry class
PID:588

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3472

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads