e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4

Analysis

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
16-08-2023 03:31

Target

e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4.exe
Size

728KB
MD5

a7597a1f0d7c5ce9aff5c1a3fda9c26e
SHA1

af31e55471f03382df77484fb05c9546884f0f9d
SHA256

e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4
SHA512

8bd21a658def1e092f9c99188af2c1d5d76b51c79db895735b918eb3947c3e853b26153258820178a9194c21a4f4e8b9f60c26cd2df18649fb6de293affad62c
SSDEEP

12288:UhDQROJmafSPZDzYOElw2KxPo0q7qzCFqaRrvtHKYY1vi+R8Cufe9ZqQwExFl5jZ:UVC9Tx0YC6lCHm8AL46X7OLkZYHO

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2220	e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4.exe

C:\Users\Admin\AppData\Local\Temp\e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4.exe
"C:\Users\Admin\AppData\Local\Temp\e365139b3aa511aa8934eacb48a6b208a4cc0d61e04512277f090e51d264e0a4.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2220

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact