32826df9d66644e104d22fea65e6b2acc816441188fa592e7a0b8f3c31fcde99

Analysis

max time kernel
155s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 01:45

Target

23437e315fcea8b5f440b1ed140a926d.exe
Size

28KB
MD5

23437e315fcea8b5f440b1ed140a926d
SHA1

d46bbccfcc3a5a5b03991d41f154623341e27cdd
SHA256

32826df9d66644e104d22fea65e6b2acc816441188fa592e7a0b8f3c31fcde99
SHA512

5f6e9884dc9d3acaca283d37b5c23116aa60886542a820cb1cd7c1a617b6d16f066a2dc24cacf593ecbee7df721da1d269c76b3bd8bab040710bdd0b4c5781e4
SSDEEP

192:/MVJ8i0Cxan+LKyMHknPE049xXYTmnRdq6ER+Xdr95aE3xmgZ/QdomgDJll9P1oF:dpCEhxSEi6ERQJ6+hDJllp15M88XCBF

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4716	23437e315fcea8b5f440b1ed140a926d.exe

C:\Users\Admin\AppData\Local\Temp\23437e315fcea8b5f440b1ed140a926d.exe
"C:\Users\Admin\AppData\Local\Temp\23437e315fcea8b5f440b1ed140a926d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4716

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact