5638abfd2969b6ff7cae7f053bafeabf94c0c7e24805e5134701c01a57d583f9 | Triage

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
26/04/2023, 14:45

Sharing

Report Analysis Logs

General

Target

5638abfd2969b6ff7cae7f053bafeabf94c0c7e24805e5134701c01a57d583f9.exe
Size

2.0MB
MD5

d8bbc41b3a597c436d0ae1035a577d21
SHA1

46d9939576a87c3f78648da0b2d391fe9733237e
SHA256

5638abfd2969b6ff7cae7f053bafeabf94c0c7e24805e5134701c01a57d583f9
SHA512

0974719e02ca67c6c28c538fa61119daafb2c6184cf1698a9656351163b2d79649d07e78413a9f22abae2653a31adc3281006704f7c58cd3aa6b4e3ac972f664
SSDEEP

49152:s+XWU1w3wJFFnV2hf1eVI83VOCMR0N+DA14M:sk1wSFFnVQemR3DAiM

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5638abfd2969b6ff7cae7f053bafeabf94c0c7e24805e5134701c01a57d583f9.exe
"C:\Users\Admin\AppData\Local\Temp\5638abfd2969b6ff7cae7f053bafeabf94c0c7e24805e5134701c01a57d583f9.exe"
1⤵
PID:1808

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads