1ef1e86b4313314d0e6c2992a7c46a73811031407e905d397e3f7ff27d6a4ad3 | Triage

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
04/05/2023, 22:14

Sharing

Report Analysis Logs

General

Target

1ef1e86b4313314d0e6c2992a7c46a73811031407e905d397e3f7ff27d6a4ad3.exe
Size

2.4MB
MD5

6dddfc34b68f135c1f035fcbf80df9bf
SHA1

7de30e323b34f3a90295b7c555b2b004a3b730f2
SHA256

1ef1e86b4313314d0e6c2992a7c46a73811031407e905d397e3f7ff27d6a4ad3
SHA512

4677e61421fadb0588bb234425a91f74560b804bbb7703cff03288c0c720c611294ac25ce868339a8fe76cb43952ccbfdfff46137ae5a04a60b2075e27cb344e
SSDEEP

49152:Jk2Mzx38MEMFSHTSGaX/XW7v3F8L6a62g8kvIzLQbID9:Jva381MIo/Gh8LkeAbIB

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1ef1e86b4313314d0e6c2992a7c46a73811031407e905d397e3f7ff27d6a4ad3.exe
"C:\Users\Admin\AppData\Local\Temp\1ef1e86b4313314d0e6c2992a7c46a73811031407e905d397e3f7ff27d6a4ad3.exe"
1⤵
PID:2028

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads