3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
26/05/2024, 10:06

Target

3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f.exe
Size

672KB
MD5

861634ffd40c8bea92a7579c24e9ba20
SHA1

06606b662866088bce50f43105a83f5bb979ca04
SHA256

3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f
SHA512

824fc0fda2fc2d183cb34ed10af15aba27021ec31ca5c0a7be7241ebf420102de7110ab639d7f7d4cc14e5e1011d01207c6ee072ffd00aa3f51d25211a504008
SSDEEP

12288:Ddwg8HuqvKk63Gzs09P8OuLjD20BS5ZVQ8jJNrR0zGa+Xeg:CgJqvK/3P0qOuLTB0bp0zGB

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2100	3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f.exe
2100	3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f.exe

C:\Users\Admin\AppData\Local\Temp\3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f.exe
"C:\Users\Admin\AppData\Local\Temp\3f371f5a42a77767dfb10bba776530da0553da4d646f33ca74d8a91340ee9e5f.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2100

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact