Analysis
-
max time kernel
135s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
-
submitted
11/10/2023, 15:48
General
-
Target
theZoo-0.60/imports/manysearches.py
-
Size
2KB
-
MD5
71bfc154118c8eb36c9cd38805ed68d8
-
SHA1
f6d4c91df20dde8b20089eddcd6e3812133644d7
-
SHA256
c6e6702a52425957468dd2dd36ed42b4db3a1fa32446629e7c23116bff83ddb9
-
SHA512
103b9f9f831ccd4962d410d0fb6a921792bd9ba2956710d2e65ca1c26131045b9ca21ad956565c38e1b9319b0492105342afd86e9c2e58676f4c1cb872228c58
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\theZoo-0.60\imports\manysearches.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx