354f58076d89492a4981405a3c62f569be8a7505beca5f9443a9b649f8c6bbd7

Analysis

max time kernel
1766s
max time network
1168s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2024, 13:50

Target
MoneyPrinterV2-main/src/classes/Twitter.py
Size 6KB
Sample240302-q5e21sec54
SHA256 5ea95b66761121009990c8f79ff97ddf1e7b9a96a4b7b9d78a603aaf5a6fd618
MD5 080274f01c7a6270398165581a09c777
SHA1 f22c804ba6465873ea83d837c16a75542d4bdbd3
SHA512 49b5735bb88f4c8f3b1f019c3debd9ec6ebd0dc413fd194cc6ed9261eac790c7b639033d03135bc1a552cf2d482fc78763c64cadac7f082a9883870e608dbdb1
SSDEEP 48:+GDtZtLMEGY7jXYpb1wFnS5G233KmRbw3dq9neqhHNLvn2gVLFH/fyEUTpsYWbFN:+GlMjY7DYDwtCamrNLvjFjmMe6D7mOKI
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-399997616-3400990511-967324271-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-399997616-3400990511-967324271-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3944	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MoneyPrinterV2-main\src\classes\Twitter.py
1⤵
- Modifies registry class
PID:1120

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact