Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 02:53
General
-
Target
TheBigTool-main/Settings/Program/Config/__pycache__/Config.cpython-312.pyc
-
Size
502B
-
MD5
d0096f9afc958debaf8e147c584438ed
-
SHA1
2c27c8a614bb7a1a01b6048ac32423275ef1658f
-
SHA256
4019dec348ebf6a45ef4ffcdfacf26782c3b414a684d4ce483f579351b5dff9f
-
SHA512
da60cfd51f02631648a8f31ca597dad2b5c386e03b8615b0afc7018d98d7a5c6a5890193addf0e7edadf0caf0c4036969033be35f81832c48495a32e6f862aca
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\TheBigTool-main\Settings\Program\Config\__pycache__\Config.cpython-312.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx