5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221

Analysis

max time kernel
150s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
07-10-2023 07:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221.exe
Size

668KB
MD5

cc886b59845c174f45577130dee4cbfb
SHA1

ddf653f2bb99393e9458fb457919bf4bceb242ee
SHA256

5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221
SHA512

c4f4b63a074730d628e14ac2f4092c944d308a1353f375c6cd5f2181e07fee2d988446ca1a87e658c572e81fce07456cdebfc5fb96ade0d9919b1766e84909ea
SSDEEP

12288:UfeR48nhAxrqJh9psVhudZUG1Xr5JYdxI:keRRnOxriIMduG1Xr5JYdxI

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1704	5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221.exe
1704	5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221.exe

C:\Users\Admin\AppData\Local\Temp\5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221.exe
"C:\Users\Admin\AppData\Local\Temp\5109ad1bab82f495bebe726a9d4c4ac5f8742c1c1e521661e2d66c29609bc221.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1704

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\ÐÇ³È.lnk

Filesize
343B

MD5
a55b38618c0a942804b0cf5396588bed

SHA1
b98b94fb1bb4de715320d8ab8dffcd6e6ad5a0c2

SHA256
8f8affe3eefcd72360b7b9d6ed0b1df99214db33bbf3efebc223e52734d6fd4c

SHA512
38e6bf44167b8503cb7d8f38c61c6eeacf7fb1ea693161c984693f529ce0e9b96110e6e6801eb8dab56adfa7793da7127742cf1ab5d698bbaeb2efa1b50cda3d

Download Submit