5584c1dc534ff2aeef5128e22048c017de5207893f454cf59b0945ef04372fb7

Analysis

max time kernel
0s
max time network
106s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 12:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1fb7da3ff810a3f4b803e477951970f4.exe
Size

1.1MB
MD5

1fb7da3ff810a3f4b803e477951970f4
SHA1

802ba62bb436ac6961eed1267e885c7e49cada0c
SHA256

5584c1dc534ff2aeef5128e22048c017de5207893f454cf59b0945ef04372fb7
SHA512

33e92354816312d71146387c769a62a25a596adbdc8b12d3845d79dadebd82458a65a501a1979e391710c83f86f8f9e1e6cc59abe55172a4ce13cd274fd69b81
SSDEEP

24576:i8hLvOhyHS5/pFu+lIHdDSa0pga7TclITAZHibsmadgu:iurO9ps+lI9DSa0pz7EITYDmad

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2056	1fb7da3ff810a3f4b803e477951970f4.exe
2056	1fb7da3ff810a3f4b803e477951970f4.exe

C:\Users\Admin\AppData\Local\Temp\1fb7da3ff810a3f4b803e477951970f4.exe
"C:\Users\Admin\AppData\Local\Temp\1fb7da3ff810a3f4b803e477951970f4.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2056-0-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-1-0x0000000000820000-0x0000000000821000-memory.dmp

Filesize
4KB

Download
memory/2056-139-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-140-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-141-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-142-0x0000000000820000-0x0000000000821000-memory.dmp

Filesize
4KB

Download
memory/2056-143-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-144-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-145-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-147-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-148-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-149-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-150-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-151-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-152-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-153-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download
memory/2056-154-0x0000000000400000-0x0000000000517000-memory.dmp

Filesize
1.1MB

Download