0fe726c1aff14fa862b7c32069a0584b2ee021563ebad3918b2ed4d76857e3a7 | Triage

Analysis

max time kernel
37s
max time network
35s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
05-05-2023 18:33

Sharing

Report Analysis Logs

General

Target

0fe726c1aff14fa862b7c32069a0584b2ee021563ebad3918b2ed4d76857e3a7.exe
Size

39KB
MD5

2b66960b67dd03e8fbe7d587456f6f8d
SHA1

32d6199c3d153fbbf822425b3f4841f16c9a1095
SHA256

0fe726c1aff14fa862b7c32069a0584b2ee021563ebad3918b2ed4d76857e3a7
SHA512

e03e0a5a95d1546b9a8bbe08a37a2b0e55cd06363ccfc163d6e69aff918a4b9065c197460b69dc2e483c9a4aa2c1720beafa2aef329ccdcd939c4bf57823b98c
SSDEEP

768:TgqSwiqQQx1wlCatl0zlMqY2PfGC9lkv8g28RKAu+Xbfk4qtEFW3CHNa8xc:Tg9rqQQ1qSJPJkv7prA+FysNjxc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0fe726c1aff14fa862b7c32069a0584b2ee021563ebad3918b2ed4d76857e3a7.exe
"C:\Users\Admin\AppData\Local\Temp\0fe726c1aff14fa862b7c32069a0584b2ee021563ebad3918b2ed4d76857e3a7.exe"
1⤵
PID:1952

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1952-54-0x0000000000400000-0x000000000040F000-memory.dmp

Filesize
60KB

Download