6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830

Analysis

max time kernel
135s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
13/10/2023, 04:16

Target

6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830.exe
Size

2.0MB
MD5

2f8930826a2326cb9a7fa3e038dc470b
SHA1

0fc48e7b3ad0c907e62d89e971cef7b9f8bdf7a5
SHA256

6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830
SHA512

2b4103be73e1417bb08183e433f1107ad0e6ea091a4a9d694cb8d8a2324af1adfd0cde2658f4e066f8d9aa4ba6f4b542a252d8abe3b485b5c76948422511a0bb
SSDEEP

49152:HByyRAH9jerqG+6BN4x4Tahe7lRfsbl9L40anbfj94gblORMeVFopknows:hBGH9jerqGhN4Zhe7jfIl9k0abbuJ2eE

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2432	6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830.exe

C:\Users\Admin\AppData\Local\Temp\6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830.exe
"C:\Users\Admin\AppData\Local\Temp\6223005927193ec3a08be7b468cf2a973e362a8b18e087ef345931d59b589830.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2432

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact