17a726378f2f852fc837ceca8e12fb2ed4abd2b53ab5b982a6eece7bb043c1bb

Analysis

max time kernel
48s
max time network
73s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 01:50

Target

4a85e4dca22c0f2c2fc07b3d8b85bf98.exe
Size

44KB
MD5

4a85e4dca22c0f2c2fc07b3d8b85bf98
SHA1

45b4ea6bea74da9c633877fdb1afff50de6b86ee
SHA256

17a726378f2f852fc837ceca8e12fb2ed4abd2b53ab5b982a6eece7bb043c1bb
SHA512

bcbaefc7fa92eaf3deb4a8b51585a947cbe304f87a6958a77fe042739e9e1129298a251de49d5a870c30b95c7877cd26633eeca6ef93ce0d10af698dae7bc5e4
SSDEEP

768:dcCtEQVihbM///TltWWyGGOimH+US7mj0jLI:ddchbM3YOiRu0jE

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2524	4a85e4dca22c0f2c2fc07b3d8b85bf98.exe

C:\Users\Admin\AppData\Local\Temp\4a85e4dca22c0f2c2fc07b3d8b85bf98.exe
"C:\Users\Admin\AppData\Local\Temp\4a85e4dca22c0f2c2fc07b3d8b85bf98.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2524

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact