d2636e005aa7683bea4d5375901baee06f19b82eed129ed834e94d816c6f20d8 | Triage

Analysis

max time kernel
150s
max time network
30s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
04-07-2023 18:34

Sharing

Report Analysis Logs

General

Target

SetupTimeFreeze1exe.exe
Size

2.8MB
MD5

7e9e94cd3dd6584ad64298f1d1e7db76
SHA1

0cd4431e1fc96c37bb49f21d7c4727df7fec4192
SHA256

d2636e005aa7683bea4d5375901baee06f19b82eed129ed834e94d816c6f20d8
SHA512

8a5eef80ee2ec06041dc5cff6f04f01eeaab720f58e68e636828afa94326affd857c140b7135cde354da62b09851005b1de04411ab297a678b6149b7c54d8ec9
SSDEEP

24576:QqN3P7sIY6mpdgjQ7M7TA3LHspurW5AkCF4ZgpoRseeAZvIET0IHD15n/dz74nH4:QWThWL8TA3LHef3ZT0uPws

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\SetupTimeFreeze1exe.exe
"C:\Users\Admin\AppData\Local\Temp\SetupTimeFreeze1exe.exe"
1⤵
PID:2300

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\7172255.ini

Filesize
17KB

MD5
3342fb9da8ea6439c071e8bfd2c9c0a1

SHA1
f8e4b2fec625f3f73a47bffcb3ff10ee72175a54

SHA256
22c62eadfcd3caaf65004620d289177a91fe99863a4179a9d74fd68161b7182e

SHA512
ac4abf1a688e9d18761f8a3f9014bad4313145c74829b34e6fc0d4ad94a097568a73ce44798cb1e068e3918afb4a42bd87799392d20eccff416b358c6e6db8c1

Download Submit
memory/2300-270-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download
memory/2300-271-0x0000000000400000-0x00000000006D1000-memory.dmp

Filesize
2.8MB

Download
memory/2300-272-0x0000000000240000-0x0000000000241000-memory.dmp

Filesize
4KB

Download