Analysis
-
max time kernel
448s -
max time network
454s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23-02-2024 21:04
Static task
static1
Behavioral task
behavioral1
Sample
Discord-Account-Creator-main/main.py
Resource
win7-20240215-en
windows7-x64
5 signatures
600 seconds
Behavioral task
behavioral2
Sample
Discord-Account-Creator-main/main.py
Resource
win10v2004-20240221-en
windows10-2004-x64
3 signatures
600 seconds
General
-
Target
Discord-Account-Creator-main/main.py
-
Size
12KB
-
MD5
9fe29e93d44ab8100c901e0d94eb7d1c
-
SHA1
8910fbfc68d57106ab16b144cd3194120749bff7
-
SHA256
ccb30997cc9a588ff604527983b0bc1c56234adb6cc540070cad8b6362a299d9
-
SHA512
9b543a489c61ec7df1b48a6899dd5ccb264112d5a1ceaed359daa7552de5603515eb603a26cdc056823070f8feaed4d8c19a7d82dafc1b7078ef2ce3cdf6ef39
-
SSDEEP
192:FQRJKq7BhL0KnHUhW17tq+GzJ/lRxCbn5dDzdUOJj5E+NjNk96Rz7ZEWD/bFDDRz:gDhghCGPRxO/dHJW+NjNnR/DRJx
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1790404759-2178872477-2616469472-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1790404759-2178872477-2616469472-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 428 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Discord-Account-Creator-main\main.py1⤵
- Modifies registry class
PID:1904
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:428