Analysis

  • max time kernel
    465s
  • max time network
    475s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240508-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
  • submitted
    06-06-2024 08:11

General

  • Target

    Stuff.pyc

  • Size

    6KB

  • MD5

    d3b84caf1d40793f0f60dd806da0af41

  • SHA1

    2cac5ca380f80f62e9b2e34066c0052e8a13a1ff

  • SHA256

    feea6f04637ae5b5103b1e39670ac80123ab208ec5704363b32143427e8b1efe

  • SHA512

    f1cf732c34f7c842dc297bb982e567f54c4a73c6705d31dbc8686b1affd891853367487f4ef37f301b95fe5aa392831db8111e72d2f5a43fb79862fad3ff4623

  • SSDEEP

    96:stfPEZXaAzphdU6GgVSIx+LNm4nJMMBQoXy/6iq:spPmXfVSC+LdJRXc6Z

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\Stuff.pyc
    1⤵
    • Modifies registry class
    PID:2660
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:768

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads