Analysis
- max time kernel
92s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20240730-en - resource tags
arch:x64arch:x86image:win11-20240730-enlocale:en-usos:windows11-21h2-x64system - submitted
02/08/2024, 03:46
Behavioral task
behavioral1
Sample
setup.exe
Resource
win11-20240730-en
21 signatures
150 seconds
Behavioral task
behavioral2
Sample
discord_token_grabber.pyc
Resource
win11-20240730-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
get_cookies.pyc
Resource
win11-20240730-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
misc.pyc
Resource
win11-20240730-en
3 signatures
150 seconds
Behavioral task
behavioral5
Sample
passwords_grabber.pyc
Resource
win11-20240729-en
3 signatures
150 seconds
Behavioral task
behavioral6
Sample
source_prepared.pyc
Resource
win11-20240730-en
3 signatures
150 seconds
General
- Target get_cookies.pyc
- Size 10KB
- Sample240802-ebznsayfrd
- SHA256 85a7c34afad2c270ca690a5b4c30cc8bf16967e623fc77f4de4497901030a93b
- MD5 b38f506528b3d6d5dbd851426c347b95
- SHA1 e91bf4ef42128267934e21be0176e552480f5977
- SHA512 ab110dc92eba564fd0ec6c6a75e779f588518dc1aa461f072ab02b96bc11fbe25e09faa6a556dc6a127c3e8826382697b72037a0cefbdaf32fd70a723e746295
- SSDEEP 192:TzOCIeinQfUF9LdwOEVOFc1mNe47+o+zEzzzzz1zz+HoowAE:TzOUiQccEe4KoOIAE
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2803179037-308240136-4183858629-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2803179037-308240136-4183858629-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 924 OpenWith.exe