Analysis
-
max time kernel
92s -
max time network
94s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
22-02-2024 19:07
General
-
Target
Vantage/build/Vantage/localpycs/struct.pyc
-
Size
305B
-
MD5
fb4d1be9dd47ca318366df9537c96c49
-
SHA1
d63627de3c9879aa4ea0eb13358b069a68e96fff
-
SHA256
eda2f45c238b798e1ca78ebce2b4b6c44776e0f2e41575ffe3c3f72b8f01c3bd
-
SHA512
37e3c0a3be228531bab588535d96c46e98cc6ff0a1ce2fe8646cd5e8ae9ac76096ab3db654ee5796a9284373fc9b297d5e19ff5fccf06e0b5c6d0ced5e67d279
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Vantage\build\Vantage\localpycs\struct.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx