Analysis
-
max time kernel
390s -
max time network
1592s -
platform
windows10-1703_x64 -
resource
win10-20231020-en -
resource tags
arch:x64arch:x86image:win10-20231020-enlocale:en-usos:windows10-1703-x64system -
submitted
14-11-2023 09:19
Behavioral task
behavioral1
Sample
AveryNuker-main/RUN THIS.bat
Resource
win10-20231023-en
Behavioral task
behavioral2
Sample
AveryNuker-main/Scraped/avery.exe
Resource
win10-20231020-en
Behavioral task
behavioral3
Sample
AveryNuker-main/avery.exe
Resource
win10-20231023-en
Behavioral task
behavioral4
Sample
AveryNuker-main/avery.py
Resource
win10-20231020-en
General
-
Target
AveryNuker-main/avery.py
-
Size
17KB
-
MD5
f7f34aad4e7521d7e4358abfa3f6f715
-
SHA1
dfc0b706cfe3e634a56d7c06be2efca5a3cabfa7
-
SHA256
d8b1d13e052ad38bd7e88f325d94aaf8ca245d96fa310545cb6d618ab1ab4d7d
-
SHA512
0c5d9e34479a1d1bfff7117dfc943c84882e26beb5a26bdfc8e79f1309179428fe40e1ea2aa65f94006be9725f98b6c0ac372b8cad1d6803129d2ae5cb65cdb6
-
SSDEEP
192:ADhumGIrgD51a3de6kklVkpK6/fB/dzB0po2E/4/Jll71JQj5fh81JhT8c0ONsEZ:ADhumGz543Q6kell71JQhh81JhLNso
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-459651055-4136032345-1270294931-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-459651055-4136032345-1270294931-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2948 OpenWith.exe