bc87818e05524ddc93619ea7568222ab21d57d346ec79a3116f2227f9dbffd43 | Triage

Analysis

max time kernel
30s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
22/05/2023, 20:40

Sharing

Report Analysis Logs

General

Target

bc87818e05524ddc93619ea7568222ab21d57d346ec79a3116f2227f9dbffd43.exe
Size

8.5MB
MD5

5e24de65bd8de8add9d1c0946c807b0c
SHA1

915164ec8857ece973af11b9e2861b9721a5cf02
SHA256

bc87818e05524ddc93619ea7568222ab21d57d346ec79a3116f2227f9dbffd43
SHA512

8132459502f0a89dd92301b0e409a1abe32c3b7224dc87e40a570bf3f94d762688abeb379cc851bb800603cb441052b9a458087326896f4c748de03d0867d1dd
SSDEEP

196608:PZSWXcb3x6Gv7zoXhg4XMyAAXeW3YM7Uaovi0xY2mp/AaGq+N+9AdEFa3on:RSWE3xRv72S4XDdIHaovi0xY24V+N+99

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\bc87818e05524ddc93619ea7568222ab21d57d346ec79a3116f2227f9dbffd43.exe
"C:\Users\Admin\AppData\Local\Temp\bc87818e05524ddc93619ea7568222ab21d57d346ec79a3116f2227f9dbffd43.exe"
1⤵
PID:1720

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads