2dd907a6c2e75d362035681962851ce9dda925345b3ffee5d1202365c99564db

Analysis

max time kernel
142s
max time network
148s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
22-08-2023 14:43

Target

ED6D3DF0.exe
Size

7.6MB
MD5

53e17d8487105b6d4d13a3ff4877a117
SHA1

f4f7c05b4078efc3dae91ba85ed53d0d6102e49f
SHA256

2dd907a6c2e75d362035681962851ce9dda925345b3ffee5d1202365c99564db
SHA512

aa0a1428f1f47e81940657335abd7be3627c0f1330e5a35199c981546c81aaeab1486eb0813e881d3c06a0f63f9e0e385bad010a00d97065bfe4b060f06b7e5e
SSDEEP

98304:TOcfHvNtJXO2B0LkqLC4sAZImknswRKoXEOedmgTw/QBbllCLaAv0F5Mv9VXggYQ:acdtJF54TSlRKoXCNw/7LaACivcgYQ

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2596	ED6D3DF0.exe
2596	ED6D3DF0.exe

C:\Users\Admin\AppData\Local\Temp\ED6D3DF0.exe
"C:\Users\Admin\AppData\Local\Temp\ED6D3DF0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2596

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact