Analysis
-
max time kernel
92s -
max time network
210s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-ja -
resource tags
-
submitted
30-11-2024 11:26
General
-
Target
Grabbers-Deobfuscator-main/a.exe_extracted/PYZ-00.pyz_extracted/PIL/GribStubImagePlugin.pyc
-
Size
1KB
-
MD5
97fcc3ff2ff4a850b26f6e62f3f23b1c
-
SHA1
532cf83d0b91e31664545735c34b3a256a7fb2aa
-
SHA256
69f877a712f5f48ebe90dc092847311298355b3377be6aad2fb745ff5a4c4642
-
SHA512
9880cf054ed0102fddc082a7d752f7b17c57ef1b7b55eac4ab0c1d7e3e8f4566d44a0dca1b99af3b16fd0f60408f72a4b90db22eb074ea52c1af23c02a1ea7e8
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\a.exe_extracted\PYZ-00.pyz_extracted\PIL\GribStubImagePlugin.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx