Analysis
-
max time kernel
315s -
max time network
1590s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
11/07/2024, 22:54
General
-
Target
REPACK BY CCURATOR/_internal/faker/providers/ssn/pl_PL/__init__.py
-
Size
2KB
-
MD5
31af546f8067730ec758ab7f0888a124
-
SHA1
a252166dadb8ace3f7ab87e2ba2c7d2da79a8cb0
-
SHA256
eb75a89f162eb8a7315187be449bd3ba5b83cc24225481f571f86b597cbd6a0e
-
SHA512
6915af9212b33f058ce5a175603f76bd1e47d8a7892f5e544f313a6f54099c895fade651735fe9cb0d790c6c8c96644ef4946af06666ef25b4c8b1ced418b1e4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\REPACK BY CCURATOR\_internal\faker\providers\ssn\pl_PL\__init__.py"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx