Analysis
-
max time kernel
148s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 02:53
General
-
Target
TheBigTool-main/Settings/Program/Config/__pycache__/Config.cpython-39.pyc
-
Size
465B
-
MD5
5c1df4621f66c75504a4e60ed8659215
-
SHA1
d10fe6a2b3734f04ddfed7abe5332ec170263b9a
-
SHA256
5bb1f4cd86555dd06e99cef80b2f9693ef504a2f3f6cd7d17dfd668cff748ebf
-
SHA512
dee6bbe301a78d88e1c40b8ee7840539e834dc707ae215a4d2c9e93436df7d182e32ebaed52eebcfb6e797e67a129cd6481734104e672986537467b9ac74bc07
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\TheBigTool-main\Settings\Program\Config\__pycache__\Config.cpython-39.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx