949c9687c1390d2cb02e6e2bc37b5a6dc566185120aaab3c7e03a5a53ea5ceab

Analysis

max time kernel
150s
max time network
167s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:42

Target

Setupfhtk1021.exe
Size

4.8MB
MD5

c9ebd45a3d79e005e122918e234d5b48
SHA1

a9c5029c47e9867b587021f30789eee746e4c0b3
SHA256

bc8acdd39bc13bff4330d5fb2e855ce98a8acfe856343ebc4257a276552e34df
SHA512

8b27805b14cab17b71d8e174ef4ef6392bfb7df74f414506a5051015f3653a9a3d4534233c4c8f6b95f44ded968635b30f0ce94bf4dbeb47e57d52f020094257
SSDEEP

98304:9M4QwLVJ+4C1oQ1yttlxVFgPtGqhdazs2+Gp9bV4HMiucclmMQbGvDanh:9M4Q+jVtVbCNhQzrJesfccEvbG0

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 4 IoCs

C:\Users\Admin\AppData\Local\Temp\Setupfhtk1021.exe
"C:\Users\Admin\AppData\Local\Temp\Setupfhtk1021.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4272

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact