Resubmissions
29-06-2024 18:23
240629-w1fqmssgpb 1029-06-2024 18:20
240629-wy9wpswcpj 1029-06-2024 18:17
240629-ww1j9awckl 1029-06-2024 18:06
240629-wpp5yasema 1029-06-2024 17:59
240629-wk8fqawajp 10Analysis
-
max time kernel
147s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
29-06-2024 17:59
Behavioral task
behavioral1
Sample
main.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
main.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
main.pyc
Resource
win7-20240611-en
Behavioral task
behavioral4
Sample
main.pyc
Resource
win10v2004-20240508-en
General
-
Target
main.pyc
-
Size
7KB
-
MD5
c7b4c30e9c1081b4443828340b3d6f26
-
SHA1
959fef1d660d007d1ac377b9da55bd962ead89e7
-
SHA256
08c619f4b016881e0aa5363b624230f0c873fafcf6acf5254ea76bdb82f34a8e
-
SHA512
69716d21fb8176987b4df569d979d20c4a98ef198b61445bf8bb1afe3464be7e59c06deb3d2ef68cca7f463319d56525a291fee2d44c4d5d7e6f0f22d3795738
-
SSDEEP
192:wyNwlSyD8AOc/WdXwryAuuPJhwvEaVIMdwamdYnw:dNwlSZyWu32syIPam2w
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Modifies registry class 2 IoCs
Processes:
cmd.exeOpenWith.exedescription ioc process Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\Local Settings cmd.exe Key created \REGISTRY\USER\S-1-5-21-1337824034-2731376981-3755436523-1000_Classes\Local Settings OpenWith.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
Processes:
OpenWith.exepid process 2740 OpenWith.exe