Analysis
-
max time kernel
94s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 18:41
General
-
Target
UpdatedIncognito-main/UpdatedIncognito-main/cert/bridge/bridge_callbacks.py
-
Size
17KB
-
MD5
c09ba9d46c95f4fa389c6cbb96a4537c
-
SHA1
edd14aba4f0ce8789d824550b268f07248f9fe90
-
SHA256
ef49bc7d5de8c244066c91933fc5a4ccb1b1f151f00744aad96cca2008660118
-
SHA512
8bd092424491492547b04127085b9fd6af13218e58a951ebc5c653f747d45ac8c5b8a92e5bcbbce7d274bcad5cadf5edd943e0c5bc1cbf465bc970214600cb85
-
SSDEEP
384:egwYwwmPF3NyIDNTGuLeMc9Xyqu1w8pjdrhe:8RRNyIDNTUP8p5rM
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\UpdatedIncognito-main\UpdatedIncognito-main\cert\bridge\bridge_callbacks.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx