65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1

Analysis

max time kernel
87s
max time network
115s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
08-10-2023 04:25

Target

65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1.exe
Size

2.1MB
MD5

0c3c8ebc20b6412c38e7bf808d873568
SHA1

ebbbb2f345a26e984c3ed6fc6d86cf35246c7db2
SHA256

65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1
SHA512

a4025cb26a2a1d723b092074a2f8ddcc3c59ed1ecae9f95da5baa590f6f39d4ffecb58b5604980b07c8ee899fdb9465b698db768f3b4a26f9a1d9aaf426782ba
SSDEEP

49152:1aMujt3diVPRmRXXZLIfPWZIfql/XsjTRaBV5rIcMi/VJRLjnQT7PN+Fk:sMujt3AVPR4pLIfPstXfvrIi/HRLjn6V

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2808	65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1.exe
2808	65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1.exe

C:\Users\Admin\AppData\Local\Temp\65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1.exe
"C:\Users\Admin\AppData\Local\Temp\65f8c5d4c7011955065a7da38a947cc09d66245b8c8359bb3804ae93f04ce9c1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2808

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact