Analysis
-
max time kernel
147s -
max time network
279s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-ja -
resource tags
-
submitted
30-11-2024 11:26
General
-
Target
Grabbers-Deobfuscator-main/a.exe_extracted/PYZ-00.pyz_extracted/PIL/ImageOps.pyc
-
Size
16KB
-
MD5
12f50885336269a9ff5d5a7dae0cb021
-
SHA1
2bd8300d4bf6987c8d9db0f5b032770eb6f13ef9
-
SHA256
d1fffd6f7a0e4116a635c253587f98363bace766b2b1d611bcba0250f3f91157
-
SHA512
af1d1cdcc34be6a2ca6ecbeefd9f99b2343badd4a711cbf73521ff5d3e19e6209008ca3de1ccbea4a4d7785161d69386aeeb92a9adac31ecdcad347f066f4d05
-
SSDEEP
384:MJtC6wgJBE2rBPpOlJgXO2A1fmMcTycw3E:MP+6f9hogXJeefeE
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\a.exe_extracted\PYZ-00.pyz_extracted\PIL\ImageOps.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx