Analysis
-
max time kernel
315s -
max time network
1594s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
11/07/2024, 22:54
General
-
Target
REPACK BY CCURATOR/_internal/faker/providers/ssn/nl_NL/__init__.py
-
Size
1KB
-
MD5
5d32dc6b260d80614ec411c94f17345b
-
SHA1
cee59192991fa1eaf9e53db84deb44134ad585b9
-
SHA256
25fa46628a851fee315f86eb9b5ec9ad095541d43188b7d9c85068afc58878b2
-
SHA512
afadd83d6f3cb592b2a2cd1caee9993efde1d8c2ee5b89bf44feb6732b642bc5e7922955c0baa6521386bbdde4fcc6b0f521655990b7deaa81cfa29a9f3fedbc
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\REPACK BY CCURATOR\_internal\faker\providers\ssn\nl_NL\__init__.py"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx