755d11ba3943ba14071f4bdb5b10d3a1db96fdbf637a2851317304aa2523a4b4

Analysis

max time kernel
120s
max time network
125s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
28-06-2024 09:12

Target

reaper1861-install.exe
Size

2.2MB
MD5

8105d86a67f1b07e2f3b6c89b288b63e
SHA1

0c1d732c2b58ba877b1437062260bf3cb18a1e69
SHA256

42d7394db612aa13571ba3775f9a5cd590c08c868dbb9fb1cd60e033e46c3810
SHA512

d91738a1e754c30dc78a71f1cea0c698b4f823f54aa15fa93d9c3265fc4965b6b845f712cd1d6e2a330cb42d4155cf7657876a0db2c3744669caf15e2d0e34ed
SSDEEP

49152:rPfwIURxvF8tpKFYRhbyQElauKz6f+3MBCcw1cIoVvx7yHee8O06c0Xb:rfxm+hRhOQXWm3M8cBIAajD06cQb

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1724	reaper1861-install.exe

C:\Users\Admin\AppData\Local\Temp\reaper1861-install.exe
"C:\Users\Admin\AppData\Local\Temp\reaper1861-install.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1724

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact