Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
-
submitted
03/06/2024, 11:33
General
-
Target
74165a120872c76b26945f36a52b3c4b3ada84d8040dae734faa4108ae98c865.exe
-
Size
11.5MB
-
MD5
3a72c9d612bf7061581e428c8904feca
-
SHA1
3f9a8dbc8871e07765970127d0ba96dd6d88dd05
-
SHA256
74165a120872c76b26945f36a52b3c4b3ada84d8040dae734faa4108ae98c865
-
SHA512
e7a057a9a8f13aef0836dfd2a8c7fee075c0223d43b24bf3001f43592a7b95ffa34e7cf99e4cb772276d1a32ed343f02173d264bb85a1bcbf80f9f9258db4f2e
-
SSDEEP
196608:9MdS8aSXIyehsliFEwb73kkNIoYIavoGwGgCAgdZGdXAGZC9+04:sY1hvb73kkSjIC1wGuQG22
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 2 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious use of SetWindowsHookEx 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\74165a120872c76b26945f36a52b3c4b3ada84d8040dae734faa4108ae98c865.exe"C:\Users\Admin\AppData\Local\Temp\74165a120872c76b26945f36a52b3c4b3ada84d8040dae734faa4108ae98c865.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx