17da6f647877a18355182877ce0e89867bd9c4302f254929148785477404d4d1

Analysis

max time kernel
3s
max time network
146s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 16:19

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2c93e07f09ea7b11f756eb698b217b80.exe
Size

248KB
MD5

2c93e07f09ea7b11f756eb698b217b80
SHA1

cd1022a924c0b23a8095935d246871d48e909019
SHA256

17da6f647877a18355182877ce0e89867bd9c4302f254929148785477404d4d1
SHA512

c031637724f5fa886110b0495117d85530f36919269c058a5ae34397121aa887f7d58495c17555e78811dcd0d8cb20b1149d7484fe3c33b38af340f5f2875514
SSDEEP

6144:DOoVQNyyUf9dgAVRKlqBiErIsKnPmb7/jWal+FfAje+5/RxoOsutOSD/uP39RWyk:DOmyUf9DRKlqgErIsKnPmb7/jWa1e+5h

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
5004	2c93e07f09ea7b11f756eb698b217b80.exe

C:\Users\Admin\AppData\Local\Temp\2c93e07f09ea7b11f756eb698b217b80.exe
"C:\Users\Admin\AppData\Local\Temp\2c93e07f09ea7b11f756eb698b217b80.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:5004
- C:\Users\Admin\gauniel.exe
  "C:\Users\Admin\gauniel.exe"
  2⤵
  PID:3740

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\gauniel.exe

Filesize
248KB

MD5
8a4900b1a9433fafbd92acf0d9965da7

SHA1
0ed552f035727c18fe1982bdca614498f9560159

SHA256
cdb024f4e70a32be575c49b60ea937be45a70ce03b4ae400e8de7f981b1c1513

SHA512
e527b32b8bc6533f19fc3dcb5fb2fc1239dcd275f55ae1ee2c4c4007af6a0dcf5e1fbcc9b41a193e4eff52bdfaefdb03b4732940ac5b43492ce5b3a86bede077

Download Submit