a85d22ccaf9cd7d27836ebaebe0bee61e5acd02356a83cf19d03d47e560fef5e | Triage

Analysis

max time kernel
31s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
20/05/2023, 14:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

dark/cursor/alternate.cur
Size

4KB
MD5

1ba025979153d4f56fc3362dbe731f53
SHA1

acc9a7f149c242711c7becf294f3cc50b4ac9d01
SHA256

343ff5d17efc14e80950fa8c3191aa76167b1d77aab85b96a732826c033e8479
SHA512

c29fc5a8017c6ed223c51223920d1b2ab58de397f203ac1ef617ad39a02049d366bdd140fd51072caff7d743082fc7ce6a694a76d2609bc892e6f69e8b876adb
SSDEEP

24:Fj2Nk5tWlJ7AJ4L83uAlWBmS1lXl61YhM8ALS1qUa7WTva7Hh4i:xkk55n3M1N6mO818uTwBr

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\dark\cursor\alternate.cur
1⤵
PID:1700

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1700-79-0x0000000002270000-0x0000000002271000-memory.dmp

Filesize
4KB

Download