582acb10868ca768a7208e898610925eed53372cef01bf4a83e583d5b36323cd

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
11/06/2024, 01:21

Target

0b8e85bab4835b6ba09f3bdec902f72d.exe
Size

4.8MB
MD5

0b8e85bab4835b6ba09f3bdec902f72d
SHA1

1ad5d7ef259079a4b60964895e72ec004ca42199
SHA256

582acb10868ca768a7208e898610925eed53372cef01bf4a83e583d5b36323cd
SHA512

7e1dae2ffa6d7eef7738e2063e6b38b609f1c64c357dd547f85e01cf8defa8d2f9169d8369dff866b7bb8e5b06208fdae4efd1b966cf50cb7b6097fdcbea48bd
SSDEEP

98304:cJSZsz35aFxepAo7haa0Dooj9ghi1RebMIg9Cbk/V8dQXSNW:cjg4haaxojDIg9Cbk/V8dQXmW

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
2004	0b8e85bab4835b6ba09f3bdec902f72d.exe

C:\Users\Admin\AppData\Local\Temp\0b8e85bab4835b6ba09f3bdec902f72d.exe
"C:\Users\Admin\AppData\Local\Temp\0b8e85bab4835b6ba09f3bdec902f72d.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:2004

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact