4a2923ae1b1cb07a7d5bd054ab63e2e30607aa1d3756bcf783f2a19ecaf9948e

Analysis

max time kernel
314s
max time network
398s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
30-06-2024 18:35

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Nexus-MultiTool-main/Helper/Funcs/__pycache__/faker.cpython-311.pyc
Size

8KB
MD5

692658f060cc852665b44607ae390599
SHA1

6f8349ee8aecdd36d44df2ffa04aa867fb9a0715
SHA256

2ba2ae90443a887446e8695dd1120c0ffb41f938bf676ab425c6be93f497c4ed
SHA512

a9f83478841c7b733fe952b1c03dac50c769ebbf2d69cc541dd124863ccb92d0207a594c6d614533ac9be23c86ed346addbb3512949939e6f32c0fbd9bd7cf77
SSDEEP

192:yBKArCBlnlN9OoW+fZrLKFNcTaRtgl1Oh0Trk:yBKAs9hfZueGtgl3Trk

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3699363923-1875576828-3287151903-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

1116 OpenWith.exe

pid	process
1116	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\Nexus-MultiTool-main\Helper\Funcs\__pycache__\faker.cpython-311.pyc
1⤵
- Modifies registry class
PID:4868

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1116

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads