bd55e0976da9f9e676f5b8387c81a90354b98ac58444058d2244a670e40696ec | Triage

Analysis

max time kernel
93s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15-04-2024 13:35

Sharing

Report Analysis Logs

General

Target

Setup1.exe
Size

248KB
MD5

6c9ca1085414c4b2c0b2fe1fe6c9531c
SHA1

2b2531af4d1cafb574b5fea0f1cd8a62032c127e
SHA256

19e518f53ee8a1c2954dedeeeb507b331f9bf2e6edda23958fb7aabe38066536
SHA512

8408a3c4eb8157af967c9842e0c887b952a97642ef1af73dc11be418ab181eb5b80d379d6f008df2cd7cb01b56249e255527cc4558791cec1c01b97508bab185
SSDEEP

6144:ksuMamfDqaBv6xdnG6+hdbHSHqFJJe4XZ/:kS1H+NG6+h5371

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082
Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

Setup1.exe

pid process

1552 Setup1.exe

C:\Users\Admin\AppData\Local\Temp\Setup1.exe
"C:\Users\Admin\AppData\Local\Temp\Setup1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1552

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads