Analysis
-
max time kernel
142s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
16/08/2023, 07:15
General
-
Target
54b75eb25f010f3ec8cb86aab87f2951a508b95acd32e69e07db02f8b82ff6f5.exe
-
Size
3.4MB
-
MD5
c8067bcbf7f3ee68c94f53ef6157df55
-
SHA1
65f1b2d1533dfbc8c1ffbe0684cd3142f2fba6c3
-
SHA256
54b75eb25f010f3ec8cb86aab87f2951a508b95acd32e69e07db02f8b82ff6f5
-
SHA512
1931a7d3181dec74c8d8bb6bd9242368ef05e171ece66c3dd9760984add88c3f5c6837af1cec77b93ad76c481fe890797d72c998d8d688a18795e3c4a0346a36
-
SSDEEP
49152:XxJQKeyTjSw3UH7tlwULxAfovAF6RKcxjvx+29uWV9D489Z:BmKZjh3UH78uAAvAF6RKAjB91PM+Z
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 18 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\54b75eb25f010f3ec8cb86aab87f2951a508b95acd32e69e07db02f8b82ff6f5.exe"C:\Users\Admin\AppData\Local\Temp\54b75eb25f010f3ec8cb86aab87f2951a508b95acd32e69e07db02f8b82ff6f5.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx