Analysis
-
max time kernel
140s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
-
submitted
22-02-2024 14:00
General
-
Target
OURTanks_setup/util/options/__pycache__/token_pron_changer.cpython-312.pyc
-
Size
2KB
-
MD5
4467e2d984dd541ed78ccbc53fcfaf73
-
SHA1
42e39dc56041b89e8249a4fcb43ebbb6fedf61db
-
SHA256
270f5bc168ad83dac173c96fed8158d5655fd468c96d2485ae18986779d77a0f
-
SHA512
96d7603a99c8f560d4be98237dc1133a0adb94c26538e9e366642600dcef7220963def117ce8c5d781742b98b2903e32e17c78b0f2c7fa2b287e39ff0e09b796
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\OURTanks_setup\util\options\__pycache__\token_pron_changer.cpython-312.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx