81712c014f7732b71f4aec9ee5ff2252f0f31bc1a287acc800dba4aed7357186

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
29/12/2023, 20:19

Target

02e4717c0039a5538c3cb4f9e4898577.exe
Size

27KB
MD5

02e4717c0039a5538c3cb4f9e4898577
SHA1

d6615b4f0e49119f7d40f552286683e7b2c830bc
SHA256

81712c014f7732b71f4aec9ee5ff2252f0f31bc1a287acc800dba4aed7357186
SHA512

bb45cd340914173ff200bc46a81f7accb7cb82018d524e741f7b73af8c34b08e5955f72912a25520b380708e1cc3e46d985ec028d47349bace816ce755c5584a
SSDEEP

384:nmAQcdTCRWgsb0nUIMPaEPErFTq/l9zEPE0L:nmN6CWgeoh2/nBI

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2968	02e4717c0039a5538c3cb4f9e4898577.exe

C:\Users\Admin\AppData\Local\Temp\02e4717c0039a5538c3cb4f9e4898577.exe
"C:\Users\Admin\AppData\Local\Temp\02e4717c0039a5538c3cb4f9e4898577.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2968

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact