7865336761d37afd2e4f310dcc60ea5cf805ec2114b45ac6407082a755095e15

Analysis

max time kernel
2s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
09/01/2024, 18:11

Target

4e183f0669df42b16e16834adbf3e15f.exe
Size

92KB
MD5

4e183f0669df42b16e16834adbf3e15f
SHA1

d9537adea6461ea2fced296c14035fad86cf3d76
SHA256

7865336761d37afd2e4f310dcc60ea5cf805ec2114b45ac6407082a755095e15
SHA512

2ff90f44abf40ecb2063a34d005d80617de34ad8b62200b4334168b3c455ff2f53e38899900c5122f15f1a816ebf37877289fe66ad629afda7e0fedadbdc8155
SSDEEP

1536:JUCSFPCoJZkzNOhwj7Hnv/NvyvJvSvbvfvTVPTpiua:aCSFKuWtVPkn

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4424	4e183f0669df42b16e16834adbf3e15f.exe

C:\Users\Admin\AppData\Local\Temp\4e183f0669df42b16e16834adbf3e15f.exe
"C:\Users\Admin\AppData\Local\Temp\4e183f0669df42b16e16834adbf3e15f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4424
- C:\Users\Admin\lvgeun.exe
  "C:\Users\Admin\lvgeun.exe"
  2⤵
  PID:1432

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact