bff471ca32dc07d8eeb7073ad2412c9f13be7e8edabb3beda4aede289311b93e

Resubmissions

03-09-2024 02:46

240903-c9rdysvenp 3

03-09-2024 02:45

240903-c83etsveml 3

Analysis

max time kernel
93s
max time network
94s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
03-09-2024 02:45

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Butter free - G2/ButterUI.py
Size

41KB
MD5

ba5e22f67463e8a0184313a6d45f4d24
SHA1

a1036813e9e0bcdb1af4e5bcd9eb35553946843e
SHA256

a2d1fc55dcc70a7b6cc8410f4a3d3b7e854c01f76da51e3773eedf49e73ffb07
SHA512

9f38881f7d006c569dfac8ea431a95e98af4256a5dfd41a34050df3aabb20322afbf4752bfa23393a64c61d7a0c81084bb8f44b4d45eae23b50ee4ef74b12db1
SSDEEP

768:OBslIMwdhstRYUPtyoA32rjcWsbrvQDPQ3Y4SG7d3gB05uryDBvKoeUneWN:Qsqdhs9Pty93jWsQ83Y4SGl5urY1msB

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-523280732-2327480845-3730041215-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2884	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Butter free - G2\ButterUI.py"
1⤵
- Modifies registry class
PID:4748

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2884

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads