921489e63e4c60c7b5301c16250f9c19172b684a2dbab3354597696f2db55cd0 | Triage

Analysis

max time kernel
28s
max time network
31s
platform
windows7_x64
resource
win7-20230621-en
resource tags

arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system
submitted
26-06-2023 20:43

Sharing

Report Analysis Logs

General

Target

Update.exe
Size

685KB
MD5

656c2d45d7c7cf44659ee03a8d7c5975
SHA1

a83001e6ce9a827757cedb377dc292fbf1783847
SHA256

921489e63e4c60c7b5301c16250f9c19172b684a2dbab3354597696f2db55cd0
SHA512

0a92f621861cf365ac826003261c2657f41e28f28fdf69b80f9b4462707533ccff8a9b27d39f6b8403be7d743d6e95637ccd44592edcd09043cac60243d83fd7
SSDEEP

12288:wMICoDh4Jub9lsfL3gkrDHoI9MZDSMAHScKx5tQUj:vArbGRII9ISMQScM5+K

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Update.exe
"C:\Users\Admin\AppData\Local\Temp\Update.exe"
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1064-54-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/1064-55-0x0000000000400000-0x00000000004B3000-memory.dmp

Filesize
716KB

Download