Analysis
-
max time kernel
90s -
max time network
98s -
platform
windows11-21h2_x64 -
resource
win11-20240708-en -
resource tags
-
submitted
09-07-2024 01:56
General
-
Target
copyreg.pyc
-
Size
7KB
-
MD5
addc13d419222de37ff4c30ea79d37b2
-
SHA1
22221cf3dad5cfbe35f1b80b754d37c30de99702
-
SHA256
056b9af052b9a66ce520d0ece213ad1e14f984095324214dc57207f36d714916
-
SHA512
1ab656e3489e5dcb5ccc530cc5b7d7bf6afb54e832fd373a0199ebd9dfff26ed93ffcbb917ae46b4de171a2faa3914a6383f5789c0d161cc8fc9e3c37e98447c
-
SSDEEP
192:7QHjFsVj85jbGa7lU0Qx4GL4MvX4ia7yfhm+Hj8TIxCqH7TG9TM:7QDqijb/xgZFo7sjJx9II
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\copyreg.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx