7dc4466130ed3330355480c74db83b07a261f27de89786065826e59b1a1c0d6d

Analysis

max time kernel
3s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 06:33

Target

2bd67f0f7bba76a4859c8b137e920e4a.exe
Size

168KB
MD5

2bd67f0f7bba76a4859c8b137e920e4a
SHA1

6a89e06cfb257619ae15799bc9c7e0c42b92f7e2
SHA256

7dc4466130ed3330355480c74db83b07a261f27de89786065826e59b1a1c0d6d
SHA512

eadf918981ffa7b4fee71a959524b9e715f996d4ea2055b8df73c5c99c6db768b73c2310eab86ffd31cf6fa58f79b1a81a92485f2b81632cc27ffa4890674e91
SSDEEP

1536:kqXJrEys7cv+c/RgBtKH67bU8TkWRifJYwdtmP+7m5KFbwQL4AW3lV4ckUl0OEZq:5BR+cpgB4ZCchor5KFjkF/5YC6XJnnqL

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4908	2bd67f0f7bba76a4859c8b137e920e4a.exe

C:\Users\Admin\AppData\Local\Temp\2bd67f0f7bba76a4859c8b137e920e4a.exe
"C:\Users\Admin\AppData\Local\Temp\2bd67f0f7bba76a4859c8b137e920e4a.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4908
- C:\Users\Admin\soepa.exe
  "C:\Users\Admin\soepa.exe"
  2⤵
  PID:2728

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact