1781d78b9630baf8c09e906483006a5305b1c2d8adeb7c1e8a1588ed152c4c05 | Triage

Analysis

max time kernel
27s
max time network
30s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
31/05/2023, 23:55

Sharing

Report Analysis Logs

General

Target

smime.p7m
Size

25KB
MD5

bd032d65ac0f08781258bc3e70af190b
SHA1

82677d26116db7409589d58a536fa7ceabf1ab41
SHA256

af159050f02effa72b627a538974912032c196786f6b8c846365ad79de721ff7
SHA512

3cd015cc151f662200ea4a815a8f7efc41d516d4a5da087ba21a9ec0286af73ebb0235949679ccb05bb089ece67881ad5af731f896ec3c4ffee51a745301ff85
SSDEEP

768:M6nFaKbLOb9LQP7LcPBeyYERp1RFEeDRdqPWbjeXClc4snAcBt:Mu1mbm3c5eyYkdvXfHmsOt

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\smime.p7m
1⤵
PID:2016

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2016-79-0x00000000020F0000-0x00000000020F1000-memory.dmp

Filesize
4KB

Download