c5eaaefc4ed4c122eb81710b1e4cd97e173cc9d088306a202701c5eee647655a

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
07-02-2024 02:04

Target

Setup_WgpsNet_20230907.exe
Size

23.2MB
MD5

735b18f67aa75222cee60d3d308e41c4
SHA1

97e419a3f0416a17bd9a1a80ce6a05db50cd3f35
SHA256

092de242753e626fecf7f5b9b0c94e7abcf039a1f65e8553ecb123ec729efd18
SHA512

e96351321728c10802ceb0f88afea4c1e1289703551cd9a361bf44bcb91a1ed3991eca85a87c89f5a0abe6ac23c003dc43a794de022ee18d0fa790c248c87a27
SSDEEP

393216:IFB2tj4OBGDZsg9I63GZQjwGIFOnKc4PvGlHZUhhq5VKzm1rzCivghQ/gNQosA9j:IFWsOwD2gL2ZWwGAaEvGl6QVOqrphgND

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2560	Setup_WgpsNet_20230907.exe

C:\Users\Admin\AppData\Local\Temp\Setup_WgpsNet_20230907.exe
"C:\Users\Admin\AppData\Local\Temp\Setup_WgpsNet_20230907.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2560

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact