Analysis

  • max time kernel
    143s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-10-2024 17:13

General

  • Target

    main.pyc

  • Size

    11KB

  • MD5

    1aea483e58eb70297feb6b6ecac88e81

  • SHA1

    1609066c7f3b194a56b669ffd5aebfd288823d57

  • SHA256

    044e2a346a252989c2c9e437b2e67e3df128b0acb704f7343adf33331f48e29e

  • SHA512

    0d8088291c50963a2b025c99f162a0c83075ee1c87c944d88aa267809e6ee85c9e0b3c8e7b88cd2fe5d9f25b54afa708e660a41619ebe1602872e8ae45c007dd

  • SSDEEP

    192:uaFkr2ncxHTbyTgUtPfpTvn018Nm1an3Fx3d/ZjiHCDjzQ:W6ncAJfpznei3d/ZiYjzQ

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\main.pyc
    1⤵
    • Modifies registry class
    PID:1892
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1588

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads