354f58076d89492a4981405a3c62f569be8a7505beca5f9443a9b649f8c6bbd7

Analysis

max time kernel
1383s
max time network
1173s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
02/03/2024, 13:50

Target
MoneyPrinterV2-main/src/classes/YouTube.py
Size 23KB
Sample240302-q5e21sec54
SHA256 e7b90b187c682efb23a4696dc2e14af1357519e09485de94ee8f401c9e804910
MD5 9eebbc0463a3c072e7d1eec1e657ffcf
SHA1 e66b483d50e08a01da044771430306369791ff6f
SHA512 59572f51e493c75edc2d6467810b3b194df5daea16684eb306962e3aba68a723f0ff90dc0f4b48d78794b649b3fdf2f57a14a4a57a8e50b249dec29defe9fce6
SSDEEP 384:4LH/jnzer17QM1fIHQClkSHSWlR59v+PnePVXX5eYF0P9St73:4LvnMKHnlZHSW9xaKXpem0P9Sp3
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-983155329-280873152-1838004294-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-983155329-280873152-1838004294-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1852	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MoneyPrinterV2-main\src\classes\YouTube.py
1⤵
- Modifies registry class
PID:2588

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact