Analysis
-
max time kernel
90s -
max time network
205s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-ja -
resource tags
-
submitted
30-11-2024 11:26
General
-
Target
Grabbers-Deobfuscator-main/a.exe_extracted/PYZ-00.pyz_extracted/PIL/ImageFile.pyc
-
Size
16KB
-
MD5
90f4f60fb1accc726585772ee08a9a1a
-
SHA1
d4de11978011b52b4c1584a34aa7d1192a79ab7e
-
SHA256
51a4bd08c85f5fda27df6e00aae394b0c338935d456e856c7b90f4d001bef54b
-
SHA512
52ceb5b17f279e095b02d9a0901271835092c798a263638b81d345c387467677876e5f4ff3efdc7e92f4951c2e1fe8d9c43860e686c8378a6d9c2b9e5d3d8722
-
SSDEEP
384:GdyKY72AmfsFkOdQ0baf3U6TOtgnxIo3CBQ:GU2A4Od7baf3U6T7i4Cu
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\a.exe_extracted\PYZ-00.pyz_extracted\PIL\ImageFile.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx