Analysis
-
max time kernel
90s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 02:53
General
-
Target
TheBigTool-main/Settings/Program/Discord-Token-Delete-Dm.py
-
Size
2KB
-
MD5
0dc8b95aaab0d0f13998bc361a637d97
-
SHA1
2a5dd96d74833a39a18c893e0e55a29c1845c612
-
SHA256
cc21556dcf0d9e90b49c648311cdf7c4e4366a003bbf62e7c34f843d13e4f785
-
SHA512
bf1b88d89797187c0ec4e6e25796d3418ccc3a781ba9727ad55417c6c879648599970095c6bb92bae951e5cb653baab1e9d832e0e9b94b83cdb77face5e4084e
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\TheBigTool-main\Settings\Program\Discord-Token-Delete-Dm.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx