Analysis
-
max time kernel
5s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
03/09/2024, 11:55
General
-
Target
system32delete.py
-
Size
845B
-
MD5
60c97cc4ff9211ea986541152fa3bdb4
-
SHA1
f208de4d68da979289308d470256721eee6e9814
-
SHA256
68d4145a6ed01a63edf24a645e78df745ecd3402eb999590377e61ea23a378b1
-
SHA512
a030289355703383889bda9564de7eca721d026e69363fefb58ba2d9b8b0b537da77401fc3030c363273ae497ea87138a3eb7a573ae95841d7402dd20aa57498
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 11 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\system32delete.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx