21b3665f3ad36166dad8a1b8494f74761f498d463a828e896e696e215cbbaab3

Analysis

max time kernel
432s
max time network
1158s
platform
windows11-21h2_x64
resource
win11-20240704-en
resource tags

arch:x64arch:x86image:win11-20240704-enlocale:en-usos:windows11-21h2-x64system
submitted
05-07-2024 03:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

GTA5TunersGenZ 5.32/include/dirent.h
Size

3KB
MD5

8c77792d709fc8bd18864f063ebee4bf
SHA1

525ac596720b947e94774c17f00a41fb7ab6cb06
SHA256

4e35d7d3f599b3de455726055a51397cdf0853da6f42ee61ce4a866c4b8e9278
SHA512

79f0ee7833c3776ad01d067db3369920e9217a6e33540a7193a791366a9855dd8745c36f348e685a43f58ea6b3aa6b9819e7e3b45e1a209e3da95b20a0dd253a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3637012076-1497690007-2831451688-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3637012076-1497690007-2831451688-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2964 OpenWith.exe

pid	process
2964	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\GTA5TunersGenZ 5.32\include\dirent.h"
1⤵
- Modifies registry class
PID:2488

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2964

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads