1a1bf890b2397155a2cb7f37e94ce4ed6c6466c433f0ee3617ab0ec2931ce61f

Analysis

max time kernel
134s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
25-05-2024 21:56

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Vapecracked_by_decends.pyc
Size

44KB
MD5

afb2faeba2b569735b846f69cb6ead22
SHA1

a689e4e63790e6abc2d192a96c669c8efa90dd97
SHA256

4ab8d7afcd37d089249ed9843ee5e39b7a888bdb8c6fb6c6b6008c6c899b42af
SHA512

85ba8c076b6d83246c5f6546beb312203cdb4a511a021d26da0f5f7eeba43a572012c2245c98f8cd23ea9f53e6dafa0e101d3177728685de7a46279abe263b46
SSDEEP

768:n9JW5Lk8biiNW6Qh7i2kHHvxNMHEAN/3HiPcpV3k40GQ7bhksvQZwATDlhLx3Vpb:n9JW9siATRi22vxNsEAN8kKlp7bOs27t

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3906287020-2915474608-1755617787-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

5032 OpenWith.exe

pid	process
5032	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Vapecracked_by_decends.pyc
1⤵
- Modifies registry class
PID:2736

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:5032

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads