Analysis
-
max time kernel
148s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22-02-2024 14:00
General
-
Target
OURTanks_setup/util/options/__pycache__/token_leaver.cpython-312.pyc
-
Size
1KB
-
MD5
d4fc3628d46ad144713a742fa4f9df35
-
SHA1
c9d491896dfff42460600084b3b960ed616c6997
-
SHA256
6cb7f7efe67f7205ae622557bfc812980bdec3472c5cc9f73ee1badb7306087a
-
SHA512
bfe902a7eee3991ad402df61e70e978a3ca82c3f6533985f5f2e8ced9bab380054d0efb25c67581f5ef114b950bad6cfa6447dcd249bbcc2ab144f46f3d8546b
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\OURTanks_setup\util\options\__pycache__\token_leaver.cpython-312.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx