Overview
overview
3Static
static
1Ingram-Pro-main.zip
windows10-2004-x64
1Ingram-Pro-main.zip
windows11-ltsc_2024-x64
1Ingram-Pro...ole.py
ubuntu-18.04-amd64
3Ingram-Pro...ole.py
debian-9-armhf
3Ingram-Pro...ole.py
debian-9-mips
3Ingram-Pro...ole.py
debian-9-mipsel
3Ingram-Pro...wer.py
ubuntu-18.04-amd64
3Ingram-Pro...wer.py
debian-9-armhf
3Ingram-Pro...wer.py
debian-9-mips
3Ingram-Pro...wer.py
debian-9-mipsel
3Ingram-Pro...net.py
windows10-2004-x64
3Ingram-Pro...net.py
windows11-ltsc_2024-x64
3Ingram-Pro...ord.py
windows10-2004-x64
3Ingram-Pro...ord.py
windows11-ltsc_2024-x64
3Ingram-Pro...can.py
windows10-2004-x64
3Ingram-Pro...can.py
windows11-ltsc_2024-x64
3Ingram-Pro...pro.py
ubuntu-18.04-amd64
3Ingram-Pro...pro.py
debian-9-armhf
3Ingram-Pro...pro.py
debian-9-mips
3Ingram-Pro...pro.py
debian-9-mipsel
3Analysis
- max time kernel
131s - max time network
126s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
25/06/2026, 16:44
Static task
static1
Behavioral task
behavioral1
Sample
Ingram-Pro-main.zip
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Ingram-Pro-main.zip
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral3
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral4
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral5
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral6
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/Console.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral7
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral8
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral9
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral10
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/eventviewer.py
Resource
debian9-mipsel-20260513-en
Behavioral task
behavioral11
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/net.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
Ingram-Pro-main/IngramPro/lib/DahuaConsole/net.py
Resource
win11ltsc2024-20260618-en
Behavioral task
behavioral13
Sample
Ingram-Pro-main/IngramPro/pocs/geovision-weak-password.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
Ingram-Pro-main/IngramPro/pocs/geovision-weak-password.py
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral15
Sample
Ingram-Pro-main/IngramPro/utils/port_scan.py
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Ingram-Pro-main/IngramPro/utils/port_scan.py
Resource
win11ltsc2024-20260617-en
Behavioral task
behavioral17
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral18
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral19
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral20
Sample
Ingram-Pro-main/run_ingram_pro.py
Resource
debian9-mipsel-20260513-en
General
- Target Ingram-Pro-main/IngramPro/utils/port_scan.py
- Size 485B
- Sample260625-t8v47adv21
- SHA256 e6835d3a35aed1e0417690e3ec060e0e0129f5748e45648367bb8c4e703d90bb
- MD5 4872c4e22581be75eaa21ffbc8b01fe6
- SHA1 31be91d5f075e764f076b93524225a46c27e7338
- SHA512 de53d08f88da8144fe68ff419c32984698614f227c4db01af49dfa25037bf3499402ce8f70ac0180562283692a92daa8122ebf1ec3e2e537f71023a494d93cf8
- TLSH T11AF02791FC666622B3FBC2745420A1207325294607844879FDBCAAA03F6BA3065B22AD
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Modifies registry class 2 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-3053180483-1881419501-3594244048-1000_Classes\Local Settings OpenWith.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2636 OpenWith.exe
Processes
-
C:\Windows\system32\cmd.execmd /c C:\Users\Admin\AppData\Local\Temp\Ingram-Pro-main\IngramPro\utils\port_scan.py1⤵
- Modifies registry class
PID:6004
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:2636