cb2f0f8bcf393e7c40aaaf09dc6387e3e801d2d07e6f6f7051a1cbf5b06d93e4

Analysis

max time kernel
146s
max time network
152s
platform
windows11-21h2_x64
resource
win11-20240508-en
resource tags

arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system
submitted
01-07-2024 03:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

main.pyc
Size

12KB
MD5

4e66aba1e02652e5eea6142e22570f7a
SHA1

0fc3e20966d3437c9b298c8bf843338f787e9d37
SHA256

8c6ec24b337586f7d321e02d49d124a5d2339b47b9a44d5f3a3126c8a21423a6
SHA512

2d45b6ef3f7b668e475806ea22445f76bec24ad7c3570fd0d8e8c249303f442e452d0a42b750dc384a8164bb6fe72efc5917082c826d5d8e9a1cde3fb9b7414b
SSDEEP

384:iF1vrxOVla9orOkis7YhiLWt2G02UZ2P/yEgYvZ0q:sDxOV228kKoGE7YvZ0q

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies registry class 2 IoCs

Processes:

cmd.exeOpenWith.exe

description	ioc	process
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	cmd.exe
Key created	\REGISTRY\USER\S-1-5-21-3001105534-2705918504-2956618779-1000_Classes\Local Settings	OpenWith.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

OpenWith.exe

pid process

1216 OpenWith.exe

pid	process
1216	OpenWith.exe

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\main.pyc
1⤵
- Modifies registry class
PID:564

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:1216

Network

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads