Analysis
-
max time kernel
91s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-ja -
resource tags
-
submitted
30-11-2024 11:26
General
-
Target
Grabbers-Deobfuscator-main/a.exe_extracted/PYZ-00.pyz_extracted/PIL/FpxImagePlugin.pyc
-
Size
3KB
-
MD5
2acf29fcbab5e1083cf463c700986556
-
SHA1
f6d0a3ee1b37d91566b1001509627630284dbec7
-
SHA256
a32ceb5001f2e7d11d30d55af184dc30840bdd4675557011bdc6e25c336bc5aa
-
SHA512
34d3f5f268d4acac3104c53c687a37b72e725fbd71bec5dc73b3fddcfe4aebb0053eaff7e3581cb80cfb64ce1458bf77092c7643fac186a7c64b5baaa6611d3e
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Grabbers-Deobfuscator-main\a.exe_extracted\PYZ-00.pyz_extracted\PIL\FpxImagePlugin.pyc1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx