General
- Target python-3.12.10-embed-amd64.zip
- Size 10.6MB
- Sample260709-gxramsd18y
- SHA256 4acbed6dd1c744b0376e3b1cf57ce906f9dc9e95e68824584c8099a63025a3c3
Malware Config
Targets
-
- Target _asyncio.pyd
- Size 72KB
- SHA256 c77de90cad749087a0c5dc5e19d78d24f6ef44e7e5ac19b8420cfc0cea62395d
Score1/10 -
- Target _bz2.pyd
- Size 84KB
- SHA256 65f610646d10d5babea080e060d244b546ec52c54012e5e937dc72dcc2e2e7bc
Score1/10 -
- Target _ctypes.pyd
- Size 124KB
- SHA256 0e56107a891100535f2da79d85a5ae65ff1227b4765bd108f8593ac1a1110d81
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _decimal.pyd
- Size 255KB
- SHA256 aeacfead2befcc0768063a037bb64bd32109ae09cb144e5f571b04dd7965db9d
Score1/10 -
- Target _elementtree.pyd
- Size 131KB
- SHA256 5009a9a53c03ef8387443b5cf6ce08e5c3a79727466a0b931c5bbca915bf89ca
Score1/10 -
- Target _hashlib.pyd
- Size 67KB
- SHA256 03d233dbace599168eaffec823de6ed7beec8c2a4ebfe9b8a3d8e042a59af3ba
Score1/10 -
- Target _lzma.pyd
- Size 157KB
- SHA256 e3deecc1f59a3b811c608861decd84de1e8df8bafd5e2b39188861318c5a38cf
Score1/10 -
- Target _msi.pyd
- Size 45KB
- SHA256 b49332bae154ebdd8c3d5e7ddfdde336d9c47f91ba028dc67bafb2420b3dbb5c
Score1/10 -
- Target _multiprocessing.pyd
- Size 36KB
- SHA256 2c636df7059cb0dd7e978dd735c7c5c8ddb09cf94754cf9e232296b96c5c545a
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _overlapped.pyd
- Size 55KB
- SHA256 662126ff80c3a1b4cedf74074029c12ae4743e6d3b37376e39ac70aacb7d4d3c
Score1/10 -
- Target _queue.pyd
- Size 32KB
- SHA256 48e76e0ad63f6932b4a77b5819f41c1e7595636ca8d9e824f0943a14b8bb5035
Score1/10 -
- Target _sqlite3.pyd
- Size 123KB
- SHA256 64b51df2805c58b023a875e8ae3be7ac7f61ef664f32ca6c90f6315da47ef0bc
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _ssl.pyd
- Size 175KB
- SHA256 0bc527d2dbc50009f43b2ed5d5982c4f63f4b647647ffa9eda612dcda80f6040
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _uuid.pyd
- Size 26KB
- SHA256 acce4f281d7ffb2dec0997527faf25b1df62ad7bd3032c568ddcf65c90edc867
Score6/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target _wmi.pyd
- Size 39KB
- SHA256 a980f1e7a29842bd946863fc2693fbeb555a9dc0f9e1630dfed9a2fcdef3ece2
Score1/10 -
- Target _zoneinfo.pyd
- Size 48KB
- SHA256 76f1439cda82ab6976df6ba505c4079444703f6d44d8b0259ce59c0ff4279fb4
Score1/10