Analysis

  • max time kernel
    171s
  • max time network
    177s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    25/12/2023, 16:32

General

  • Target

    2d752e05ae523008b00fed0cc1c7c461.exe

  • Size

    1.2MB

  • MD5

    2d752e05ae523008b00fed0cc1c7c461

  • SHA1

    2ccd0645d0bb2f9e8c3a1ec84e983bf287d69659

  • SHA256

    25b7889eca999f771147c267550ee60c4f6642feb478b1401c5bf30c6e264dd5

  • SHA512

    25cb110681cb99e39936b0bede3f5c10b187f7b3537aaf19c2d382269b3c3bdabbb3f1ee5db1af00ba9c416223e996b4f646928c52f68fedd563f5bfd4766f35

  • SSDEEP

    24576:GpP9xumUHdVqwHFX6Ya9dlIidw9boblG4q1bOP9LJxrnNYfT639pS:GszJGl6glG4qNOP9LHNYfTM9w

Score
3/10

Malware Config

Signatures

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2d752e05ae523008b00fed0cc1c7c461.exe
    "C:\Users\Admin\AppData\Local\Temp\2d752e05ae523008b00fed0cc1c7c461.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:3856

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\oem_te.tmp

    Filesize

    135B

    MD5

    c7413c6fb8daa588c8ba321de7611ea2

    SHA1

    ab76239a550fa5945adf995d1b7f8c995fb3ad97

    SHA256

    6bca6969f7ea81a3f0f8380ae9f2daf47c00604ec4d285fd7f350bc72708af94

    SHA512

    4bf13ea80dc4497d9ac7296eef5f6bcc32792b25ca939792fe3fa970c8da8546bb0066553f43c48c0d4843c9c4423569bfb79c53699ccb51740f1c22223fd5df

  • memory/3856-0-0x0000000000400000-0x0000000000556000-memory.dmp

    Filesize

    1.3MB