66e230e18a5969724335e27f9a43282002e510e633326a83a2546f157e059ada

Analysis

max time kernel
29s
max time network
31s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
16-06-2023 07:31

Target

66e230e18a5969724335e27f9a43282002e510e633326a83a2546f157e059ada.exe
Size

1.1MB
MD5

8f9cc34c963271ea71de6e0253c1d93e
SHA1

60efa0641bf740b5d6590ec161bd386951d44449
SHA256

66e230e18a5969724335e27f9a43282002e510e633326a83a2546f157e059ada
SHA512

7da537074290c18f020265b7e8a89584c23ffcad43f6f2d0405336a90724759b6548fae015a43fd7a2482a5eb507d98769d94559415323f25ab50a5597bcf3e4
SSDEEP

24576:1S1Xq5oMxw1wkGbpn2nu8bJ3yPwSlE5ElsT0HOJSz5rEN8R:2VMx6J3yoSlE5ElsT0oSz5rEN8R

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 6 IoCs

C:\Users\Admin\AppData\Local\Temp\66e230e18a5969724335e27f9a43282002e510e633326a83a2546f157e059ada.exe
"C:\Users\Admin\AppData\Local\Temp\66e230e18a5969724335e27f9a43282002e510e633326a83a2546f157e059ada.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:1656

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

C:\Users\Admin\AppData\Roaming\MiniPage_2345\download\0\2345MiniPage.NewVersion.data

Filesize
29B

MD5
99fb8e84b8aa92889349054a60e1f359

SHA1
1b3dd1afb4fe4533ca16db4dd3e7845c13b0e1c5

SHA256
5313e624a817ebcb34675027d12b87465de4fc4fdddfdd74d244490c4911b8e4

SHA512
2a99095109445c3ca1b9fad5c87fdfed331641401ca8d19d3ab4d109e18b9dc5feb739485f14f390bd3bcfa3a4325e3b1278fe1bb8690dd8df16edb9af52faac

Download Submit