5847451fe92ade8277599206f2d3ec904eef8e396bb5a6a6c988912e579dfacf

Resubmissions

20/07/2025, 12:23

250720-pkfx5szzex10

20/07/2025, 12:22

250720-pkafcszzet10

09/07/2025, 19:42

250709-yez89s1nw910

Analysis

max time kernel
100s
max time network
103s
platform
windows11-21h2_x64
resource
win11-20250619-en
resource tags

arch:x64arch:x86image:win11-20250619-enlocale:en-usos:windows11-21h2-x64system
submitted
20/07/2025, 12:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
batch_interpreter.py
Size 32KB
Sample250720-pkafcszzet
SHA256 4b6b08f8639487b0f69788419f404a2f60b8f3f4327fef928f2fbefeb14c6be4
MD5 0da4aeafc919996d9221df4a5750f6eb
SHA1 feef7d942ddb9659175f47dfad77cd909abc0b23
SHA512 0a5e2bbdeb2778469b5fa2b21a298ca6392783b4cd822a9f2cb3af454023fbfaa2a2517e556ef1bd900475a2e73afd71cdea9dca40681f093b04c5b74af010ac
SSDEEP 768:9PdsvDKnuqmiZFHFXohle4DrJr41HKKzQ5d:JfVuLh41HJC
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1418876453-2228697459-2788511057-1000_Classes\Local Settings	OpenWith.exe
Key created	\REGISTRY\USER\S-1-5-21-1418876453-2228697459-2788511057-1000_Classes\Local Settings	cmd.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3560	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\batch_interpreter.py
1⤵
- Modifies registry class
PID:4740

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:3560

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads