79656190a94175c9cb99509b6287cef12c5121a2065b5e5e9efd7c6574c3b925

Analysis

max time kernel
3s
max time network
93s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 03:02

Target

01a23a102db2c85130396c6f5c4fcb4b.exe
Size

120KB
MD5

01a23a102db2c85130396c6f5c4fcb4b
SHA1

a7e0f25eaa48c1c85607e995e1486774411ab02a
SHA256

79656190a94175c9cb99509b6287cef12c5121a2065b5e5e9efd7c6574c3b925
SHA512

1cfedb0f43edbff4ad112036fe787590d0e197e10e41ba49578e715a9190cb2f140d5e57cb8ade58347e10367e26b4d246dae7a1ea63d67b383532b33c04fe43
SSDEEP

3072:hnCbZSukOY8hrJFVNM/N/5sfqDfwqpQcD:1ork6hrJ3NON/5sG9R

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4852	01a23a102db2c85130396c6f5c4fcb4b.exe

C:\Users\Admin\AppData\Local\Temp\01a23a102db2c85130396c6f5c4fcb4b.exe
"C:\Users\Admin\AppData\Local\Temp\01a23a102db2c85130396c6f5c4fcb4b.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4852
- C:\Users\Admin\meegu.exe
  "C:\Users\Admin\meegu.exe"
  2⤵
  PID:4556

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\meegu.exe

Filesize
2KB

MD5
f2fab054c335d958ebbba235b68fc959

SHA1
ced880534a88fad2ff8e3f513fe4da27469896cd

SHA256
dced4b72e935dec8477594bbd2fbd7fb2c0507dc94561365123115ce7e9943bc

SHA512
651413bd29ee30205df1f039eeba8bba7e9d87c10183d95fbb0ee994b7a5ac68010c1f6219ff6070c8e4b7ff3d34f57d386344b89fa40b0a9d5f6739d643df25

Download Submit
C:\Users\Admin\meegu.exe

Filesize
22KB

MD5
a09c73c36ec3beee9bbc1df8123f0c6d

SHA1
a542c46325f506dcecbcd61d54d5dcf3bc1ff095

SHA256
fa54c43414be5f467edc3c12f447549a9815acdf688c849f75af17d4233d82b0

SHA512
12702974bf130a3f4abec0402e26cf6dc075cd56a9bc3d5f757467ae1801d7286dc26716131d0d0436679b9acc542b25a65a2e90ef5099099818b0397640250d

Download Submit