Analysis

  • max time kernel
    1s
  • platform
    windows11-21h2_x64
  • resource
    win11-20240426-en
  • resource tags

    arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    25/05/2024, 23:03

General

  • Target

    triggerbot.pyc

  • Size

    45KB

  • MD5

    17b0773e4297487b5b40f432847a3113

  • SHA1

    fb7d279c0a9f2e00dcb9642b3563603ee6102b1c

  • SHA256

    c53e630c83ec422a0d451939b9c0a554a13427373d34379f172e1036ffb9bb2d

  • SHA512

    6779324a9cd7455ce01fd441579173ea2ab22b5fe1849ebce9eaa4787c0c0e5d05ca42c66c48d05f579f3ef05ec1498e0aeefefe2315fc2ab6f333a1ad4c2d9a

  • SSDEEP

    768:64qQEAHaSawB+KSrLmn5W6BBDxs3NkRrFVJjV8+r4M6bGr1B7GB+Eq+QI:SQEA6SawB+RrLmn5hBz2StFVJjVDobca

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\triggerbot.pyc
    1⤵
    • Modifies registry class
    PID:3356
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2188

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads