Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
-
submitted
15-01-2024 05:45
General
-
Target
5c4906e6e704917e594aacab4fbe4e9d.exe
-
Size
592KB
-
MD5
5c4906e6e704917e594aacab4fbe4e9d
-
SHA1
7fd08014da80980d397951638c80dab407e65d00
-
SHA256
b3bccc9d3f518da703d7f8124376167271f000ab31b42ce10182aec350ba9589
-
SHA512
9ae7439432883feb0218b5f76a523f3624a5573e70c34cadc7ed1d1df75f21cc0bbf935ebf2d65465eabbdb4e0f62b58a9ad35b674dc568ed531d5273d139c0a
-
SSDEEP
12288:KpFJD5O+B4Xh8tDMRyw8ELU4KA/uB65EUEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEN:KXDcx8tgRyLELrKAGB6uUEEEEEEEEEEa
Score
7/10
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\5c4906e6e704917e594aacab4fbe4e9d.exe"C:\Users\Admin\AppData\Local\Temp\5c4906e6e704917e594aacab4fbe4e9d.exe"1⤵
- Drops startup file
- Suspicious use of SetWindowsHookEx