Analysis
-
max time kernel
44s -
max time network
48s -
platform
windows11-21h2_x64 -
resource
win11-20231222-en -
resource tags
-
submitted
11-02-2024 12:27
General
-
Target
bruteforce.py
-
Size
364B
-
MD5
bd10b25846bf2074f88be1ffb800e919
-
SHA1
80a26073d272b8524885eaf365d416a8cb9576fc
-
SHA256
81bf99ef6d5df6a1f62be9b729d091cd519f3fb2ff23a3a35cf2312d3d41580f
-
SHA512
e5b68329cc582d04bb6971b849767480daddad678a35986be24b46aecec2c38aa143bf3ab204cce4a18b7fddc6b18a776b43b1f821201ea64ac9f5e39f770e8c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\bruteforce.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx