General
- Target pykx-4.0.0-cp312-cp312-win_amd64.whl
- Size 9.3MB
- Sample260708-aj9rhahs8p
- SHA256 8c6bbcd764e41b9832ba0fa58a5ff0a0d336aed808cc50b5491a35378c03de59
Malware Config
Targets
-
- Target pykx/__init__.py
- Size 20KB
- SHA256 d15ea0e46d41fa8023dc38aafa7c8b3473377d919ce610a2ad603f19d655c5ac
Score3/10 -
- Target pykx/_ipc.cp312-win_amd64.pyd
- Size 67KB
- SHA256 63c982d9d52b02b14a0fe28e19591dad3162fcf2c182e8525aa1065998f61045
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/_numpy.cp312-win_amd64.pyd
- Size 14KB
- SHA256 dc1df599adc4b42fb4b75b3ae16719d27b18eb38898ae2b6f1bcff57c8c65929
Score1/10 -
- Target pykx/_pyarrow.py
- Size 3KB
- SHA256 9c170c12dd6eb9c16ab6e2d7fcfa66fe412768d3796283874f64d3b8623ab61a
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/_pykx_helpers.cp312-win_amd64.pyd
- Size 10KB
- SHA256 52c3168266be738e492054367ecb41b379def174eaf1fc64667c735a61d660e5
Score1/10 -
- Target pykx/_version.py
- Size 532B
- SHA256 ac6a6ac1f09eb26d717edcce02be228a179f2e54ef690e4ab032184231cb1c61
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/_wrappers.cp312-win_amd64.pyd
- Size 296KB
- SHA256 891406c492da20e073e5772d0e9efd9cc9015097958e80b54116adf54604c6fa
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/cast.py
- Size 4KB
- SHA256 7a7316f3ae970329377eba3ec1273d287b45c43e906013ab8260798490de49b8
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/compress_encrypt.py
- Size 6KB
- SHA256 2f586c0e4ebb284bb7f55c26cc27423b1bf7265b00d29d0f18439083e4f7ed91
Score3/10 -
- Target pykx/config.py
- Size 20KB
- SHA256 053ed84fba591da1839592311faa9f4d639d897e91394236b890c462bbc791b9
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target pykx/console.py
- Size 2KB
- SHA256 90baed5c18ba4ef5dae34cce8e7fe3533ed167491f53b526d64ed10b1a4e54ab
Score3/10 -
- Target pykx/constants.py
- Size 220B
- SHA256 413cccb4997e2b0bb7172aaa50ee816c9c8211dee9c8e8029582b596cdab43d4
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
- Target pykx/core.cp312-win_amd64.pyd
- Size 207KB
- SHA256 cb557b32f94d8f8fc7352f120474338f68135c7c9d3e9f4cae65a6b388548d03
Score1/10 -
- Target pykx/ctx.py
- Size 10KB
- SHA256 2a8edb47820930fa0d9125442ffd9058bc898f7e8d717eaadad8f9d44177ad7b
Score3/10 -
- Target pykx/db.py
- Size 47KB
- SHA256 a0e0a06f96489664a0aadb55a39129aad961a98673dd12b705c4b28e96f7512d
Score3/10 -
- Target pykx/embedded_q.py
- Size 11KB
- SHA256 5c31a1db47711de30660938f3079242a346b5b6f65e043404fe7c03a600e8415
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.