Analysis
-
max time kernel
138s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
08/08/2024, 05:35
General
-
Target
KunoichiTrainer-0.25.1-pc/lib/python3.9/chardet/mbcharsetprober.pyc
-
Size
2KB
-
MD5
ed16f397398a7ae89ea52c2759c0cb98
-
SHA1
cdb35f54436c67a017878966a2f717ef274ef074
-
SHA256
c51a858c12e91491242611d307b4ad8b9604600c3f9573bc0d015692e4829c29
-
SHA512
1ad4612766cbba5d64e65a385e6d039dbe209915097085a295ae4b9834c36550e8c7a10f9ddc5bdfd2104e92ef1959e2eed5180c3fc1f8902b4935d8ead0de80
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\KunoichiTrainer-0.25.1-pc\lib\python3.9\chardet\mbcharsetprober.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx