7db0a087e14cd00aaf88c9aa9b2e9b64f1661906e1616394572228cc8e3ad058

Analysis

max time kernel
101s
max time network
18s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
20/07/2024, 23:31 UTC

Target

2766e6d961832d8f3b4a6774af17e1f0N.exe
Size

68KB
MD5

2766e6d961832d8f3b4a6774af17e1f0
SHA1

fb4bcd056cb7dfb96b60386bfd0c0e857e368771
SHA256

7db0a087e14cd00aaf88c9aa9b2e9b64f1661906e1616394572228cc8e3ad058
SHA512

051fa4471ae67f55fb798d1e60db39e7ccfbf2f441102bb5fa600d073def94262663d0d02907d754938512968e73bb242574c024aab91866ada77dd99d940ed9
SSDEEP

1536:KbSqZVJdThUxmskJvqpmfasBQOuLm4NeNuWZr1lsQpD:KbLpZuEskJicngipNuW51BD

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1512	2766e6d961832d8f3b4a6774af17e1f0N.exe

C:\Users\Admin\AppData\Local\Temp\2766e6d961832d8f3b4a6774af17e1f0N.exe
"C:\Users\Admin\AppData\Local\Temp\2766e6d961832d8f3b4a6774af17e1f0N.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1512

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact