Analysis
-
max time kernel
314s -
max time network
1600s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
11/07/2024, 22:54
General
-
Target
REPACK BY CCURATOR/_internal/faker/providers/ssn/pt_BR/__init__.py
-
Size
1KB
-
MD5
7d15441b85d28183b9e6b60197124e5b
-
SHA1
9ca99e0e50b59e5077776241bf5a7e5ec8857c7d
-
SHA256
c3701b90009b07ee595ca547b356abc41592267512b884c3c841f23efe32664f
-
SHA512
ad5b6a55d0d5c9a56dceeb5c034d03eefe661dd4e9000887199bbb312f3b4e1f813ea71961c6cb50139d108fff881c4ef1574939571c86e79e9da6982282624c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\REPACK BY CCURATOR\_internal\faker\providers\ssn\pt_BR\__init__.py"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx