Overview
overview
10Static
static
3sublime_textx64.exe
windows10-2004-x64
10sublime_textx64.exe
windows11-21h2-x64
10__future__.pyo
windows10-2004-x64
3__future__.pyo
windows11-21h2-x64
3__phello__.foo.pyo
windows10-2004-x64
3__phello__.foo.pyo
windows11-21h2-x64
3_compat_pickle.pyo
windows10-2004-x64
3_compat_pickle.pyo
windows11-21h2-x64
3_dummy_thread.pyo
windows10-2004-x64
3_dummy_thread.pyo
windows11-21h2-x64
3_markupbase.pyo
windows10-2004-x64
3_markupbase.pyo
windows11-21h2-x64
3_osx_support.pyo
windows10-2004-x64
3_osx_support.pyo
windows11-21h2-x64
3_pyio.pyo
windows10-2004-x64
3_pyio.pyo
windows11-21h2-x64
3_strptime.pyo
windows10-2004-x64
3_strptime.pyo
windows11-21h2-x64
3_sysconfigdata.pyo
windows10-2004-x64
3_sysconfigdata.pyo
windows11-21h2-x64
3_threading_local.pyo
windows10-2004-x64
3_threading_local.pyo
windows11-21h2-x64
3_weakrefset.pyo
windows10-2004-x64
3_weakrefset.pyo
windows11-21h2-x64
3abc.pyo
windows10-2004-x64
3abc.pyo
windows11-21h2-x64
3aifc.pyo
windows10-2004-x64
3aifc.pyo
windows11-21h2-x64
3antigravity.pyo
windows10-2004-x64
3antigravity.pyo
windows11-21h2-x64
3argparse.pyo
windows10-2004-x64
3argparse.pyo
windows11-21h2-x64
3Analysis
- max time kernel
98s - max time network
104s - platform
windows11-21h2_x64 - resource
win11-20250610-en - resource tags
arch:x64arch:x86image:win11-20250610-enlocale:en-usos:windows11-21h2-x64system - submitted
08/07/2025, 11:07
Static task
static1
Behavioral task
behavioral1
Sample
sublime_textx64.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral2
Sample
sublime_textx64.exe
Resource
win11-20250610-en
Behavioral task
behavioral3
Sample
__future__.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
__future__.pyo
Resource
win11-20250619-en
Behavioral task
behavioral5
Sample
__phello__.foo.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
__phello__.foo.pyo
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
_compat_pickle.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral8
Sample
_compat_pickle.pyo
Resource
win11-20250610-en
Behavioral task
behavioral9
Sample
_dummy_thread.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
_dummy_thread.pyo
Resource
win11-20250610-en
Behavioral task
behavioral11
Sample
_markupbase.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
_markupbase.pyo
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
_osx_support.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral14
Sample
_osx_support.pyo
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
_pyio.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral16
Sample
_pyio.pyo
Resource
win11-20250610-en
Behavioral task
behavioral17
Sample
_strptime.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral18
Sample
_strptime.pyo
Resource
win11-20250610-en
Behavioral task
behavioral19
Sample
_sysconfigdata.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral20
Sample
_sysconfigdata.pyo
Resource
win11-20250619-en
Behavioral task
behavioral21
Sample
_threading_local.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral22
Sample
_threading_local.pyo
Resource
win11-20250619-en
Behavioral task
behavioral23
Sample
_weakrefset.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral24
Sample
_weakrefset.pyo
Resource
win11-20250619-en
Behavioral task
behavioral25
Sample
abc.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral26
Sample
abc.pyo
Resource
win11-20250610-en
Behavioral task
behavioral27
Sample
aifc.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral28
Sample
aifc.pyo
Resource
win11-20250610-en
Behavioral task
behavioral29
Sample
antigravity.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral30
Sample
antigravity.pyo
Resource
win11-20250619-en
Behavioral task
behavioral31
Sample
argparse.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral32
Sample
argparse.pyo
Resource
win11-20250610-en
General
- Target aifc.pyo
- Size 33KB
- Sample250708-m77chawvbw
- SHA256 c48577ac5d7cf712e46bc89eee98087bc886afa4b1343d837a055c109647c76d
- MD5 47e41ab4da9d68e7e8f62217a1a49428
- SHA1 c8ba55343b21dfe9fc206e9dd7e42a91353c3a30
- SHA512 cfac78340e26c3647ffe243b4e002198794fbf364aeb9c949e8094c04422743f78abcff00f06108eae455496403b322441fdc26ed6a01d58f7cc880018632642
- SSDEEP 768:uPk5F3FHWMHDzYmy3pp/zfgRgYzqYyRuOrXjZRs+R+:Z5F3F2Mg5p/zf4gYj9QhR+
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2340264150-4060318110-2688614100-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-2340264150-4060318110-2688614100-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5312 OpenWith.exe