Analysis
-
max time kernel
614s -
max time network
1578s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
-
submitted
11-07-2024 22:54
General
-
Target
REPACK BY CCURATOR/_internal/faker/providers/ssn/pt_PT/__init__.py
-
Size
411B
-
MD5
8a92121d03f693f891fce8f67df10456
-
SHA1
3d8c6d135773630774525ffc915583eb1f82f878
-
SHA256
ae538f9316a7abb9aa619cbe36697131c06cfd30556c1991bebd7b23d2052bba
-
SHA512
d9cd9482b4bb3d929b0fefb6571bb67825363d06511b1224861efc095f6963d328b2f9aa94150b5e3f5db308be8fe1ef4e675e4704a6a933fdb2bff2f6483ebc
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c "C:\Users\Admin\AppData\Local\Temp\REPACK BY CCURATOR\_internal\faker\providers\ssn\pt_PT\__init__.py"1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx