Overview
overview
10Static
static
3sublime_textx64.exe
windows10-2004-x64
10sublime_textx64.exe
windows11-21h2-x64
10__future__.pyo
windows10-2004-x64
3__future__.pyo
windows11-21h2-x64
3__phello__.foo.pyo
windows10-2004-x64
3__phello__.foo.pyo
windows11-21h2-x64
3_compat_pickle.pyo
windows10-2004-x64
3_compat_pickle.pyo
windows11-21h2-x64
3_dummy_thread.pyo
windows10-2004-x64
3_dummy_thread.pyo
windows11-21h2-x64
3_markupbase.pyo
windows10-2004-x64
3_markupbase.pyo
windows11-21h2-x64
3_osx_support.pyo
windows10-2004-x64
3_osx_support.pyo
windows11-21h2-x64
3_pyio.pyo
windows10-2004-x64
3_pyio.pyo
windows11-21h2-x64
3_strptime.pyo
windows10-2004-x64
3_strptime.pyo
windows11-21h2-x64
3_sysconfigdata.pyo
windows10-2004-x64
3_sysconfigdata.pyo
windows11-21h2-x64
3_threading_local.pyo
windows10-2004-x64
3_threading_local.pyo
windows11-21h2-x64
3_weakrefset.pyo
windows10-2004-x64
3_weakrefset.pyo
windows11-21h2-x64
3abc.pyo
windows10-2004-x64
3abc.pyo
windows11-21h2-x64
3aifc.pyo
windows10-2004-x64
3aifc.pyo
windows11-21h2-x64
3antigravity.pyo
windows10-2004-x64
3antigravity.pyo
windows11-21h2-x64
3argparse.pyo
windows10-2004-x64
3argparse.pyo
windows11-21h2-x64
3Analysis
- max time kernel
103s - max time network
141s - platform
windows10-2004_x64 - resource
win10v2004-20250619-en - resource tags
arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system - submitted
08/07/2025, 11:07
Static task
static1
Behavioral task
behavioral1
Sample
sublime_textx64.exe
Resource
win10v2004-20250610-en
Behavioral task
behavioral2
Sample
sublime_textx64.exe
Resource
win11-20250610-en
Behavioral task
behavioral3
Sample
__future__.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral4
Sample
__future__.pyo
Resource
win11-20250619-en
Behavioral task
behavioral5
Sample
__phello__.foo.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral6
Sample
__phello__.foo.pyo
Resource
win11-20250619-en
Behavioral task
behavioral7
Sample
_compat_pickle.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral8
Sample
_compat_pickle.pyo
Resource
win11-20250610-en
Behavioral task
behavioral9
Sample
_dummy_thread.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral10
Sample
_dummy_thread.pyo
Resource
win11-20250610-en
Behavioral task
behavioral11
Sample
_markupbase.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral12
Sample
_markupbase.pyo
Resource
win11-20250619-en
Behavioral task
behavioral13
Sample
_osx_support.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral14
Sample
_osx_support.pyo
Resource
win11-20250619-en
Behavioral task
behavioral15
Sample
_pyio.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral16
Sample
_pyio.pyo
Resource
win11-20250610-en
Behavioral task
behavioral17
Sample
_strptime.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral18
Sample
_strptime.pyo
Resource
win11-20250610-en
Behavioral task
behavioral19
Sample
_sysconfigdata.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral20
Sample
_sysconfigdata.pyo
Resource
win11-20250619-en
Behavioral task
behavioral21
Sample
_threading_local.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral22
Sample
_threading_local.pyo
Resource
win11-20250619-en
Behavioral task
behavioral23
Sample
_weakrefset.pyo
Resource
win10v2004-20250610-en
Behavioral task
behavioral24
Sample
_weakrefset.pyo
Resource
win11-20250619-en
Behavioral task
behavioral25
Sample
abc.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral26
Sample
abc.pyo
Resource
win11-20250610-en
Behavioral task
behavioral27
Sample
aifc.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral28
Sample
aifc.pyo
Resource
win11-20250610-en
Behavioral task
behavioral29
Sample
antigravity.pyo
Resource
win10v2004-20250619-en
Behavioral task
behavioral30
Sample
antigravity.pyo
Resource
win11-20250619-en
Behavioral task
behavioral31
Sample
argparse.pyo
Resource
win10v2004-20250502-en
Behavioral task
behavioral32
Sample
argparse.pyo
Resource
win11-20250610-en
General
- Target antigravity.pyo
- Size 1003B
- Sample250708-m77chawvbw
- SHA256 643147fd0e238d8376802d3dac1f32abf6773e1a64e97b5476958d25225ee80d
- MD5 ee7ae4788d52a54a10256df6fd2cff49
- SHA1 21349f1615a253f905908bace33493505ceafbc1
- SHA512 3d7c54fb803d6e48f42aca9903bd5ba43bd5ce64e52c6923c487603dbc1e307a031a8a00444a73cab3dbb9bdcfb11027faa141dba4c26292b1fc3f15974976ea
- MD5 SHA1 SHA512
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-4144907350-1836498122-2806216936-1000_Classes\Local Settings OpenWith.exe Key created \REGISTRY\USER\S-1-5-21-4144907350-1836498122-2806216936-1000_Classes\Local Settings cmd.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 5760 OpenWith.exe