dccf3c22b188bf647e9bc03f61275314bfc185c2520b38a683bf1566e484e993 | Triage

Analysis

max time kernel
28s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05-05-2023 16:51

Sharing

Report Analysis Logs

General

Target

X64/DIFXAPI.db
Size

10.0MB
MD5

216d9df008dd6f1d3df83fce613524f6
SHA1

3b5f566334d588add84a0c7983187bccfbbf5aa7
SHA256

86be4940c2fc18eda11fa860c815eddcf98689aea446814127622bd47abec547
SHA512

bab7288b6a3740fe14cfd8e325fa78528f2288e87b08e60bf88f0753f99b6ffa4663933718e176b2549f371dfd85735424146d4b751d065324d1ff6dc8e9061c
SSDEEP

98304:27mUa6pMlGs+XMdFtDkHYOToHYOTFHYKHY6HYpwaLsyJ95xJm1hEVT4eNTigdGWO:EmVfcMv1iwaQQxJlTENIJranuf2jZ

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\X64\DIFXAPI.db
1⤵
PID:1960

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1960-79-0x0000000002470000-0x0000000002471000-memory.dmp

Filesize
4KB

Download