Analysis

  • max time kernel
    440s
  • max time network
    453s
  • platform
    windows10-ltsc 2021_x64
  • resource
    win10ltsc2021-20250113-es
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20250113-eslocale:es-esos:windows10-ltsc 2021-x64systemwindows
  • submitted
    22/01/2025, 15:18

General

  • Target

    telnetlib.py

  • Size

    26KB

  • MD5

    a8758557226bcb3d71c5fee9fa513020

  • SHA1

    50a72c21c521c2b95aea002ec94cf94499d7c4cb

  • SHA256

    7852298241ce34d1b08ec1d079b0280c331cc4ab5b41a4c17bfecd055a372c7d

  • SHA512

    cbead1cd8cec31afd519ea9695997695715aa627ee3cfc47d6a35cc24c4092efb507a9cf289c3ece62210f7ea7d7b71a4de224e6c467081bc42635ed932d7b36

  • SSDEEP

    384:Vp6pRh1i1Lo430tyvL74zTOpyHCVZellNBbt6aUQ4wEQN:Vsh1ipo+0tyvL7sOpyHCVAllN7

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs

Processes

  • C:\Windows\system32\cmd.exe
    cmd /c C:\Users\Admin\AppData\Local\Temp\telnetlib.py
    1⤵
    • Modifies registry class
    PID:3300
  • C:\Windows\system32\OpenWith.exe
    C:\Windows\system32\OpenWith.exe -Embedding
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:1340

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads