953592b85e8972a6496f4f6674b260829cda59c6876ca4a15d03d8440ecc62f6

Resubmissions

09-07-2024 02:17

240709-cqtpza1err 8

Analysis

max time kernel
94s
max time network
98s
platform
windows10-2004_x64
resource
win10v2004-20240704-es
resource tags

arch:x64arch:x86image:win10v2004-20240704-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
09-07-2024 02:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Trap-Stealer/obfuscator.py
Size

6KB
MD5

1de398a75ec806f24a67fff1d468174a
SHA1

53227c275fcf268eeb99a610a4777aadf1b6ce10
SHA256

4f48d5d6d8094ab7cee817f7c91c0b9ed08ebaa3760125d5a96294ddc7757478
SHA512

357f3e798d453c9ed942ff96e0f16bdeac2506b980fcfd504224586911be6a74b5254ace70a2a0dfadeaa2a0523c97c195e55f0636cfbd27b8325b69026c562e
SSDEEP

192:fgcdAG5zjG851aPDqOhaHjxciOFJzZ+OF6EIGCWy:fzFzjG85syjOZFJ11FHIGCL

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2480455240-981575606-1030659066-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2480455240-981575606-1030659066-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

2608 OpenWith.exe

pid	process
2608	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Trap-Stealer\obfuscator.py
1⤵
- Modifies registry class
PID:3888

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2608

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads