Fake BSOD Delivered by Malicious Python Script, (Fri, Feb 14th)
ID: 175cc5ef-81ae-5123-8819-b3731d507983
STIX ID: report--175cc5ef-81ae-5123-8819-b3731d507983
Feed Name: SANS ISC Diary
Threat Score
A brief analysis of a Python sample (SHA256: d716c2edbcdb76c6a6d31b21f154fee7e0f8613617078b69da69c8f4867c9534) shows it uses the tkinter library to create a fullscreen, topmost window that imitates a Blue Screen of Death; this behavior is presented as an anti-analysis/annoyance trick that can hinder analysts but appears low-impact and not obviously destructive.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.