Analysis
-
max time kernel
12s -
max time network
16s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-09-2024 21:34
General
-
Target
main.pyc
-
Size
7KB
-
MD5
b9f5ab6c0060a5590446260066c26266
-
SHA1
9b699973e7ddfe2c0c1fdb54d630b7620d161416
-
SHA256
8bfece13ea5f4cc192660fc35bae9f27f4e0b8a8149bd87ba764f8e792b0dc0c
-
SHA512
49fb2285809141d0fff4ab2e23f224b61fa6223e993e9ad6faaa0345e70bc6799259eee88ca3367155259dcc64053093b2dc3cb1f63da16014942be1fbb6c251
-
SSDEEP
192:wdOEdD8ZwWdXw24NGbGpCvTJhwg0CUMdwDclnw:8OuWu24Nc92gIPDclw
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 35 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\main.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx