7b2014dd9e9dc361b87e7368756f4850bca2c624f8fea5307cf60a20eb70e5b1

Resubmissions

28/06/2024, 21:21

240628-z7hqcsvgpj 7

28/06/2024, 21:19

240628-z6lqmavgmm 7

Analysis

max time kernel
1s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
28/06/2024, 21:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

main.pyc
Size

155KB
MD5

d97907afdefb4fdb33b4c0beff00875d
SHA1

3148f6cdad3252407ccc3d09df2908fe01071e22
SHA256

ae86bb98ebf64201c9696e1be66dec6bd4020f7aef55049ec1aa2a967142bb9b
SHA512

e36ba8b533af26dac8f8fedb77076dca387594acd5dee9b86060e6a227dd85da0a716fb9602b1f4b2474ebd7fee7082ea5b2c16247e06d087840cfafe2206d23
SSDEEP

3072:7h5WyOz0pBAuubX34I0xpKTsJnxufgZ3SGe91qc1:7hky90uGX3ypZ7ZAf

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
732	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\main.pyc
1⤵
- Modifies registry class
PID:572

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads