Analysis
-
max time kernel
86s -
max time network
93s -
platform
windows11-21h2_x64 -
resource
win11-20240708-en -
resource tags
-
submitted
09-07-2024 01:56
General
-
Target
encodings/cp037.pyc
-
Size
3KB
-
MD5
aa5511d6cb95b18d3d75cbcd1687dadb
-
SHA1
4c868a590583ddfd90ce7d4b98e70e72f4d0a4d8
-
SHA256
5a3649822f3bd73867e1289d70a9849773a64df28b51d99e1b8b8c84afe71433
-
SHA512
d39cb318a7196664ca31fbb4efcaeda2fa0bd0247e0ef6f3e888e61bd86d8dc6bcec59405924cf62ebe9a04dd49f866af0c3de7012609e1d8cdfb6d6d64f3581
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\encodings\cp037.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx