Analysis
-
max time kernel
92s -
max time network
98s -
platform
windows11-21h2_x64 -
resource
win11-20240704-en -
resource tags
-
submitted
09-07-2024 01:56
General
-
Target
encodings/charmap.pyc
-
Size
4KB
-
MD5
2ef000b3ddc92256c1b0f4184780352a
-
SHA1
6362a3bb0ddd5cefc0bd2c7c6be153e2f630b17c
-
SHA256
6666c397b110390c8e61d26a34ca15a1335e632af1b843c9be41445e808f130a
-
SHA512
e9d55c00b53345229e3d6bd42b61749615ebf031cdc0419e5f648c331abc71b0fad0f0b0302f170c7c8cd4ef53c24961db05b89c6671b0626e7ecd6344e854c9
-
SSDEEP
96:/9dlOoowce3UufLaDwj+5RnSadcRXQSLfE1:/HooodGUuTaDwj9adQXrL81
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\encodings\charmap.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx