346c5936361a4ef13a3b2d6a28b5c14c22404c6d041b2fab6d0e333642e95526

Analysis

max time kernel
211s
max time network
279s
platform
windows11-21h2_x64
resource
win11-20240426-en
resource tags

arch:x64arch:x86image:win11-20240426-enlocale:en-usos:windows11-21h2-x64system
submitted
31-05-2024 07:32

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

YouTube-Viewer-master/youtube_viewer.py
Size

35KB
MD5

41d77bc8491ea8a4b33bd3b9745f09d2
SHA1

229101fd0a499b53ba8c77b34342ab12ede9b933
SHA256

924b848f64f670fe7abbbdb325fc5b753735da506e255de87a5d1f006dbf8e6d
SHA512

e5892d5e48bcd519cf417905f3473fb59da7e97c4928e61cdb2c7ca6c96dc27943ef6c5f82af1d16e6dca55bc11260664f9cff8f19311aff5a22f3c38a598bea
SSDEEP

384:s6RD6yL2bJ8so3AjwNU1OhWa4yOgYA5Ai46ZYrpOvdOdjfHoR+d6yz+SFMFEdhN7:T5eJMAjwNUuwykA74fXGGI2R8ZDVJCv

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3938118698-2964058152-2337880935-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3938118698-2964058152-2337880935-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

3688 OpenWith.exe

pid	process
3688	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\YouTube-Viewer-master\youtube_viewer.py
1⤵
- Modifies registry class
PID:4648

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3688

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads