e72826c3dbd6781eaa34b9ec33e276f6d811c36c3a6ced9ae95e67fbf1c7cf8c

Analysis

max time kernel
150s
max time network
159s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
15/04/2024, 17:35

Target

wjpjk/Support/SETUP1.exe
Size

280KB
MD5

535574eeca41d3717859f090b0f235ae
SHA1

15c0eb08b5167b40a312152cac9118142c3eced7
SHA256

78b83d8008065b38a706aca8a6e3da63904c028cb7c5ffd54f02c0e9042d7998
SHA512

6e1b6f081ab8232f371f5e2d77157984bd44e3060b6a45accf3a13d902d82d81a4b3ae9981e0f6b3e7819b93b63e8b66ff34b91bb07493cc9ddbfafea8d84fc8
SSDEEP

6144:+uOvemROOMqMA8K3eEGOCUgtLD2J9dh4bYTJ6Qf:ZONOmMQGp2J9

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
3252	SETUP1.exe

C:\Users\Admin\AppData\Local\Temp\wjpjk\Support\SETUP1.exe
"C:\Users\Admin\AppData\Local\Temp\wjpjk\Support\SETUP1.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3252

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact