5188c69bd772ebe6ca8b34e8c08eec90f63ffcf1d6ab20287e074732da21076a

Analysis

max time kernel
93s
max time network
95s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
15-07-2024 22:30

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

jet.pyc
Size

43KB
MD5

26607351ccf2e9de1e035344be8dfcda
SHA1

5c38d2794b360b866fd3bd040ab033fd3007dff7
SHA256

def71c9a9d3ac683b7b7d22ba4d8658cd53a0521ee1ec17cecf7f66646c75192
SHA512

c5605bbb93e988a4f0aca6d7171bab2240c7f0f116c9e0290a45f40c5f2c387813ba4e40a5097cf913fcb7e30eeabbace261292b4184cfdf922fc43be9e6a78d
SSDEEP

768:jL5tse7c8cULSHrzJQRKc7Rr7R7O0AFzgN3FBcw2muyc:jlWUZ8rzJQR7Rr7R70KNpm

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-2636447293-1148739154-93880854-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

4024 OpenWith.exe

pid	process
4024	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\jet.pyc
1⤵
- Modifies registry class
PID:5016

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads