Analysis
-
max time kernel
91s -
max time network
99s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
22-02-2024 19:07
General
-
Target
encodings/cp850.pyc
-
Size
12KB
-
MD5
1487e2d3cffcd3747e853e003203ce5d
-
SHA1
967ea9630cb2199698b6f31082956c687e78d614
-
SHA256
9afd0c069be0c6132e1893c62bf9f979702a368a0d84d6a71476217488463989
-
SHA512
76f0643fa2667b060cebfa2ac4edbc009aad0af34827c0e8ecdb6b55059eba61caa5fe321a621beb6ea519394bf42eb348ff497877a218a1316b70925eca7f77
-
SSDEEP
192:6amdIaSCyfPuowaSjNz7PTV2+EMTG1FnHdWJb1GTnGRtFyz7nUAY1FtoSmha86:v8cJuNFL2+E7NUkTnG0HUAY/86
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\encodings\cp850.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx