Analysis
-
max time kernel
171s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25/12/2023, 16:32
Static task
static1
Behavioral task
behavioral1
Sample
2d752e05ae523008b00fed0cc1c7c461.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
2d752e05ae523008b00fed0cc1c7c461.exe
Resource
win10v2004-20231215-en
General
-
Target
2d752e05ae523008b00fed0cc1c7c461.exe
-
Size
1.2MB
-
MD5
2d752e05ae523008b00fed0cc1c7c461
-
SHA1
2ccd0645d0bb2f9e8c3a1ec84e983bf287d69659
-
SHA256
25b7889eca999f771147c267550ee60c4f6642feb478b1401c5bf30c6e264dd5
-
SHA512
25cb110681cb99e39936b0bede3f5c10b187f7b3537aaf19c2d382269b3c3bdabbb3f1ee5db1af00ba9c416223e996b4f646928c52f68fedd563f5bfd4766f35
-
SSDEEP
24576:GpP9xumUHdVqwHFX6Ya9dlIidw9boblG4q1bOP9LJxrnNYfT639pS:GszJGl6glG4qNOP9LHNYfTM9w
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
pid Process 3856 2d752e05ae523008b00fed0cc1c7c461.exe 3856 2d752e05ae523008b00fed0cc1c7c461.exe 3856 2d752e05ae523008b00fed0cc1c7c461.exe 3856 2d752e05ae523008b00fed0cc1c7c461.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 3856 2d752e05ae523008b00fed0cc1c7c461.exe 3856 2d752e05ae523008b00fed0cc1c7c461.exe 3856 2d752e05ae523008b00fed0cc1c7c461.exe
Processes
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
135B
MD5c7413c6fb8daa588c8ba321de7611ea2
SHA1ab76239a550fa5945adf995d1b7f8c995fb3ad97
SHA2566bca6969f7ea81a3f0f8380ae9f2daf47c00604ec4d285fd7f350bc72708af94
SHA5124bf13ea80dc4497d9ac7296eef5f6bcc32792b25ca939792fe3fa970c8da8546bb0066553f43c48c0d4843c9c4423569bfb79c53699ccb51740f1c22223fd5df