Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
08/03/2024, 23:06
General
-
Target
b88bd3722a967ff4f0cc10dab185329e085d05999321c81fe7b093b682e3d85a.exe
-
Size
3.6MB
-
MD5
21b398c683c71d6107d8862daa0f4229
-
SHA1
babe199645aa345c442ba94ff128bde99c0ae967
-
SHA256
b88bd3722a967ff4f0cc10dab185329e085d05999321c81fe7b093b682e3d85a
-
SHA512
fda23697f42dbdb9352fb471ad21528c689a25b4d59d505aa2310f6860a39d89bed96134b747d0418490ca6142a08508ee438eadc66eab238250f87938fc6470
-
SSDEEP
98304:QwYeJu3Qq82CcvwIRDsWpHbhBhlwPUsXR265xr+zFBOaEGTe:QwYeivsWDBsPUsXROFtH
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\b88bd3722a967ff4f0cc10dab185329e085d05999321c81fe7b093b682e3d85a.exe"C:\Users\Admin\AppData\Local\Temp\b88bd3722a967ff4f0cc10dab185329e085d05999321c81fe7b093b682e3d85a.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx