Analysis
-
max time kernel
134s -
max time network
107s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
20-08-2024 13:39
General
-
Target
theZoo-0.60/imports/db_handler.py
-
Size
1KB
-
MD5
b8b24113150f9849c9433242709ddd22
-
SHA1
1cd524efb69b06ba18098fe80913281d98f7c19c
-
SHA256
e6ce5e564121d8499898b16e323d9731aa0f3b16a44d4a648dbac810ff0d2d82
-
SHA512
817d44b6ced87676772903b8bc99a2db14c77d2b92bf604bf29d2f273f91c49bec3fe857e350cdc63b79395916b0d6c3de11d957e3ad1345d7c0435b1b41e172
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\theZoo-0.60\imports\db_handler.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx