Analysis
-
max time kernel
140s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
17/08/2023, 23:04
General
-
Target
shadowgen.pyc
-
Size
1KB
-
MD5
c1eada488b7e9b877345a169dddd5718
-
SHA1
d23e8f00cb92a813e7a9fefb8ef85c4cf5d1f1df
-
SHA256
f70687f65e2ea74f5f1ccbbb5a229ba8d75d7f6dd2d5056e1c62e2961a1c6e8f
-
SHA512
481b4a4965ee0b6a92aad7717dbe784d220adc2c26babaed1b22ee64b42d79f4949919432e644bbca16e24c2cc38a96a6ca095984707b1da6600b22b68bf1b5a
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\shadowgen.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx