Analysis
-
max time kernel
1765s -
max time network
1175s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 19:56
General
-
Target
encodings/bz2_codec.pyc
-
Size
2KB
-
MD5
df92025a794678fcbde84921de6d47d9
-
SHA1
518e314be1fd311557cd5d7102c3a723f8a70230
-
SHA256
8f3d12df9c806a0f8b15200ad7200ddc32cd01b993c5b5b01ecbb1ec6e3c2415
-
SHA512
32ce1784ca9d1f377f29b561ce4fca8e5ab926a595fdf33eb493db65091d1677d814c56faeb5e957f9ab5b141ccd0a3139028362f3713e32471ff21cecc50627
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\encodings\bz2_codec.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx