18b95a4060c7114f7e9787c652109413ba9b77fbb8834c1aeda7ea25b4601224

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 05:38

Target

088f6a3026d573cb7ca99bad3d1ab10a.exe
Size

48KB
MD5

088f6a3026d573cb7ca99bad3d1ab10a
SHA1

62dd2138f1333e3b727abe7d8bc2da0db704f819
SHA256

18b95a4060c7114f7e9787c652109413ba9b77fbb8834c1aeda7ea25b4601224
SHA512

1e44d6a3395d48e9eea18cf8a178f236cd7f8733ed79d0af19af0cd65e7067fdfc985df5c851a295f75ec1a6be6a5571d0ffdf20f7377d589eb8f32d4e7f4bed
SSDEEP

768:YJSHHU6Fj2wWqWVqY/QQQVuCQCVPwH+ObWOxJ:b00CVpQjjV7OCCJ

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2652	088f6a3026d573cb7ca99bad3d1ab10a.exe
2652	088f6a3026d573cb7ca99bad3d1ab10a.exe

C:\Users\Admin\AppData\Local\Temp\088f6a3026d573cb7ca99bad3d1ab10a.exe
"C:\Users\Admin\AppData\Local\Temp\088f6a3026d573cb7ca99bad3d1ab10a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2652

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M2VO416U\òûQ‡!¦jNæ4½wþbÜ›[1].htm

Filesize
488B

MD5
e72cecc01e570204768e37b520725feb

SHA1
d08a447480297d28a9e7218cfbbfb5671e505ea1

SHA256
aaf3cebcca96723565b4e3051b0f3babd5ca5e41e9273d02771b808046935131

SHA512
05a5f4a662e8fa322148d16e225c58f5a35a57a84136a5d6d4b2521a9adc1331ec3a8dd79da86d4fa962b966c11342cace7675cffd638d25c964efdc088dfd94

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\W79VKSP8\cA[1].htm

Filesize
492B

MD5
c002f95cb5a887ec2e0555aea8ce36ae

SHA1
157a4bba9e54508f5c2d709a1914be579398b964

SHA256
baa663e80c774d19b7aa36efc8f4d836f5c1539bc10cf0c3c3e633f45a9047c1

SHA512
382d3c4fda039494813739ef7ec782b61f8a52c2d885ac4abf2f6839ae6cd8c8e6798b41fe374178621d4ee5a0dde8f4f990abc84a69baa9ea6b831ba79ff2a3

Download Submit