Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
08-01-2024 02:58
General
-
Target
4a4595e8ae2bf6e3050cf706739896b0.exe
-
Size
56KB
-
MD5
4a4595e8ae2bf6e3050cf706739896b0
-
SHA1
df2bed0770ea8c85b9ddcf18539c14508b26117a
-
SHA256
73e36cec52a79387609b5c4423c12bab2f86204c7c2a655b0c3190351ef18b30
-
SHA512
7f605c9437ff6bc4a1939d2541593c4f2d8b6a64fc7213ddbda2cad47d0ff751bc239c890801a8c309ebf4822b6121db593629871fc9ad1119810cd6f122806d
-
SSDEEP
768://Cc9et/M/57hQ6GceJeTaENag0qTXSKIrvDsH7dq4rY5i:HCcYt/MRlQ6VeJoIrvDIq+R
Score
10/10
Malware Config
Signatures
-
UAC bypass 3 TTPs 1 IoCs
-
Drops file in System32 directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
-
System policy modification 1 TTPs 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4a4595e8ae2bf6e3050cf706739896b0.exe"C:\Users\Admin\AppData\Local\Temp\4a4595e8ae2bf6e3050cf706739896b0.exe"1⤵
- UAC bypass
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx
- System policy modification