b5c7cf1b8f21e5835a909a2070b14dc7471089b6431bfd668791270bed6b31e5

Analysis

max time kernel
134s
max time network
103s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
06-06-2024 19:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

pyrobloxbot/__init__.py
Size

4KB
MD5

6931b645545ce1b441b8e706c1d50018
SHA1

043260190eff7acf621f13fbdd7a50c2c5ad37fb
SHA256

01f39845c1025b8f4270d3dcf59d1c0273f3d7bc10246ae8d2b38984e3062b54
SHA512

0b1af7a0495aa8fad4255a368e200f7ecc3b42711faec096237079101ce4c9010419f061e4f5cdaf18001942c1782879ae156c9a1be8de1618cdc00aa4508b2f
SSDEEP

96:NcXEH9eedFzyT2iR5PwtOIstGOHpFimJKJyJsfJozQw3:ddY3v

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-4124900551-4068476067-3491212533-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2044 OpenWith.exe

pid	process
2044	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\pyrobloxbot\__init__.py
1⤵
- Modifies registry class
PID:2676

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads