Analysis
-
max time kernel
144s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
31-12-2023 05:24
General
-
Target
29e296980798e76ff8abe46905ef4d32.exe
-
Size
7.1MB
-
MD5
29e296980798e76ff8abe46905ef4d32
-
SHA1
6e61a3e01ce937368a96f79237e5451f5606e49a
-
SHA256
c220c900a23bf6c510ef4e4f1c61368eb918d20e4a45469030f8cf6adfdfcf7d
-
SHA512
597ed06621521e500d70794debdeb2a474922073351810acc1666a3204a5b616114dcafd219e69db835626f9804f5c23ab3ca1a8acfb5ad0312e7ff864e2ba5c
-
SSDEEP
98304:ms2HLJQEzZ2fX9AmXUf7/sbD17KoMRONvivOuSIQkFae:ms2rJQaK9lXUfzsbAKsnQve
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 1 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: AddClipboardFormatListener 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\29e296980798e76ff8abe46905ef4d32.exe"C:\Users\Admin\AppData\Local\Temp\29e296980798e76ff8abe46905ef4d32.exe"1⤵
- Enumerates connected drives
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx