Analysis
-
max time kernel
147s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22-02-2024 14:00
General
-
Target
OURTanks_setup/util/options/__pycache__/token_joiner.cpython-312.pyc
-
Size
1KB
-
MD5
e0a931c9910e3c2040f2726eeed34fbe
-
SHA1
9e7c2dd8c871500724348a613ce07bdd67a1bdbd
-
SHA256
f208b017d6ac8611c21765f6bb815efba2371d6db4663c474638371b28cd8d9b
-
SHA512
a7bc6b918641355526f58f233e1cac8ce7b3f0ae9554b2c776141eadc054fee0846edad301a857626841cdb4689bfd7542e3f319e79b11b99ee2d4160ce4d74f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\OURTanks_setup\util\options\__pycache__\token_joiner.cpython-312.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx