Analysis
-
max time kernel
1383s -
max time network
1169s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
26/03/2024, 19:56
General
-
Target
encodings/cp1253.pyc
-
Size
2KB
-
MD5
3e936f01183c421c7b0ed0187e11ee75
-
SHA1
e1d11c7dc721ca3031187786f29be5cac3abb76d
-
SHA256
530a7b0e73d9cc39f1b6cb810a4497ddbb4ca862dfb283bf3d03cc584eb5d087
-
SHA512
cf759228d039465428f33958fa5c59cac1016358664e52bda1ad047f08ea8ca6e9e66e73bd0935b96752fee336f7649ddfcb01af588e97f933fc8ec8be158eb1
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\encodings\cp1253.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx