05a27e21a0194e0b5ac0af3fe1ba6f6aa6866e874ab2fd7126421139ffb80c59

Analysis

max time kernel
117s
max time network
117s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
03/05/2024, 16:29

Target
SecuriteInfo.com.Heur.14778.19916.exe
Size 14.3MB
Sample240503-ty8brsba8w
SHA256 05a27e21a0194e0b5ac0af3fe1ba6f6aa6866e874ab2fd7126421139ffb80c59
MD5 0377ce16ddc06f934686186e15933b7c
SHA1 5da8cdbd36613e71e9887b28cd4fab1adb9312ba
SHA512 cd5dad5fdcf4ca2ae38025da0cd2909c2ffec87b6b3a884e6a94dfbe1896e31f52c41a9e3c42f0ad70b420287ace96a556350d2072f626793d37c8a01002fe0b
SSDEEP 393216:MUrnPmd9pWYvD7oUA3hUQjKSHZ3ObdfhdP3rzKVmiot75W+:frPmLpr1sEbHdPbuFq75W+
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2324	SecuriteInfo.com.Heur.14778.19916.exe

C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.14778.19916.exe
"C:\Users\Admin\AppData\Local\Temp\SecuriteInfo.com.Heur.14778.19916.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2324

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact