8751f5824a27f1a54ea746495eb8bf015e55c56d1128ca39dab10a2bee112359

Resubmissions

11-11-2024 10:44

241111-mswx8aybkj 10

25-10-2024 13:05

241025-qbvklszdkh 10

23-10-2024 19:44

241023-yf1anayfjp 10

Analysis

max time kernel
94s
max time network
136s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
11-11-2024 10:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

source_prepared.pyc
Size

168KB
MD5

11f6c56cafe9a1a6efebe7618868003b
SHA1

27d6b5d6d315bf5063737561dfce2d72e1ade7dd
SHA256

d97bfb28b1c258bf7964fa90325bcc22dd3e2ed22a954d0ed21b51c756a0cd88
SHA512

3efa1c586ff5493e01cc48857bcf449583c3e93bfafe96a5c630f6c6a4403d0960b1861303f66a344d07c556e1518c1b85aabf10a6409fdab4b30850f44d28c6
SSDEEP

3072:AexHVNaOO/5ESl1RdotPZTJ0pZXScT0o+IvdXzusTWP:BNaOO/5ESFdoCpUY0oysS

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1480	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\source_prepared.pyc
1⤵
- Modifies registry class
PID:3264

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1480

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads