cbe5cdf7ad6e2c7b436b15be3f500205a5d62d9fe07f7744171a19e1486a176f

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 23:19

Target

SETUP1.exe
Size

280KB
MD5

535574eeca41d3717859f090b0f235ae
SHA1

15c0eb08b5167b40a312152cac9118142c3eced7
SHA256

78b83d8008065b38a706aca8a6e3da63904c028cb7c5ffd54f02c0e9042d7998
SHA512

6e1b6f081ab8232f371f5e2d77157984bd44e3060b6a45accf3a13d902d82d81a4b3ae9981e0f6b3e7819b93b63e8b66ff34b91bb07493cc9ddbfafea8d84fc8
SSDEEP

6144:+uOvemROOMqMA8K3eEGOCUgtLD2J9dh4bYTJ6Qf:ZONOmMQGp2J9

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1908	SETUP1.exe

C:\Users\Admin\AppData\Local\Temp\SETUP1.exe
"C:\Users\Admin\AppData\Local\Temp\SETUP1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1908

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact