Analysis
-
max time kernel
150s -
max time network
157s -
platform
windows10-2004_x64 -
resource
win10v2004-20250207-en -
resource tags
-
submitted
07/02/2025, 16:17
General
-
Target
Black-Grabber-V3-main/Black-Grabber-V3/options/AntiSpam.py
-
Size
578B
-
MD5
4ea7b29ea782f98ed9553b0da35a728c
-
SHA1
1d19271948816d2cd8dcbdf5ea246aecfd3b2258
-
SHA256
65e7aa358eb37087ea43057f48d46b39d27ab1f6e789df62e949d57bb8e094e6
-
SHA512
edf1a8b429d927777169203191ca01dd5f64a7f1064eccee66b6211e48697481f20d34cbb8fad172fa569e68baab6a980d7f475bcbd879b616a1335ecf74d4da
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Modifies registry class 2 IoCs
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Black-Grabber-V3-main\Black-Grabber-V3\options\AntiSpam.py1⤵
- Modifies registry class
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
-
C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /ua /installsource scheduler1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken