Overview

overview

3

Static

static

1

PvZ_Toolki....3.zip

windows7-x64

1

PvZ_Toolki....3.zip

windows10-2004-x64

1

PvZ_Toolki....3.exe

windows7-x64

1

PvZ_Toolki....3.exe

windows10-2004-x64

1

PvZ_Toolki...xe.asc

windows7-x64

3

PvZ_Toolki...xe.asc

windows10-2004-x64

3

PvZ_Toolki...e.hash

windows7-x64

3

PvZ_Toolki...e.hash

windows10-2004-x64

3

PvZ_Toolki...h).exe

windows7-x64

1

PvZ_Toolki...h).exe

windows10-2004-x64

1

PvZ_Toolki...xe.asc

windows7-x64

1

PvZ_Toolki...xe.asc

windows10-2004-x64

1

PvZ_Toolki...e.hash

windows7-x64

1

PvZ_Toolki...e.hash

windows10-2004-x64

1

PvZ_Toolki...ds.yml

windows7-x64

3

PvZ_Toolki...ds.yml

windows10-2004-x64

3

PvZ_Toolki...up.yml

windows7-x64

3

PvZ_Toolki...up.yml

windows10-2004-x64

3

PvZ_Toolki...sh.png

windows7-x64

3

PvZ_Toolki...sh.png

windows10-2004-x64

3

PvZ_Toolki...pt.url

windows7-x64

1

PvZ_Toolki...pt.url

windows10-2004-x64

1

PvZ_Toolki...X1.der

windows7-x64

1

PvZ_Toolki...X1.der

windows10-2004-x64

1

PvZ_Toolki...X2.der

windows7-x64

1

PvZ_Toolki...X2.der

windows10-2004-x64

1

PvZ_Toolki...s).url

windows7-x64

1

PvZ_Toolki...s).url

windows10-2004-x64

1

PvZ_Toolki...t).url

windows7-x64

1

PvZ_Toolki...t).url

windows10-2004-x64

1

PvZ_Toolki...s).url

windows7-x64

1

PvZ_Toolki...s).url

windows10-2004-x64

1

Analysis

  • max time kernel
    142s
  • max time network
    161s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19-02-2024 16:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    PvZ_Toolkit_v1.20.3/builds.yml

  • Size

    755B

  • MD5

    63690868148d6b97d9cbe9e8bb895b3c

  • SHA1

    4ff4db3d09d3c77c76d151045c5813b2ae257de7

  • SHA256

    390320bddcfc5f9ad5354a83572477671f7f8a8fc4b9e502ed3c69d03144b3a1

  • SHA512

    81285226a4fdc84f933a53d9613fb17d9116bdf2ff4060f22952118c977a14b0df53368abb54312290e202fee9b46a1845f3c04e3f94566bab8201d1314fe7bc

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\PvZ_Toolkit_v1.20.3\builds.yml
    1⤵
    • Modifies registry class
    PID:1128
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:3148

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads