e3dd44c2da7974c86dbe4931d28ea4fc609423c6d05e1b7f171c66e0b0f0dfba | Triage

Analysis

max time kernel
1s
max time network
7s
platform
windows10-2004_x64
resource
win10v2004-20230703-en
resource tags

arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system
submitted
14/07/2023, 16:22

Sharing

Report Analysis Logs

General

Target

2d181b584a1babexeexe_JC.exe
Size

37KB
MD5

2d181b584a1bab4f342bb7f6e55337af
SHA1

a9a075a4c560bca096a298ae7fed68b8c56ac999
SHA256

e3dd44c2da7974c86dbe4931d28ea4fc609423c6d05e1b7f171c66e0b0f0dfba
SHA512

79ada0a2af63d6537d4c111246d363380693930ed7f535349edae38a0ed5a4ad6dce802f665c8d78608598084aba4b0860f10eac5252a73fba776c2bfd6ffd3e
SSDEEP

768:vQz7yVEhs9+js1SQtOOtEvwDpjz9+4RELLJsdo3VU1:vj+jsMQMOtEvwDpj5H+JswS

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2d181b584a1babexeexe_JC.exe
"C:\Users\Admin\AppData\Local\Temp\2d181b584a1babexeexe_JC.exe"
1⤵
PID:2800
- C:\Users\Admin\AppData\Local\Temp\misid.exe
  "C:\Users\Admin\AppData\Local\Temp\misid.exe"
  2⤵
  PID:4772

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
37KB

MD5
f9fa1f0ae36217270252a5d2ea08f6e6

SHA1
3e3cf560cacc7b87e2bd0060392dfdeb4f934d64

SHA256
8b7497456bd2eec71beab2936dc0ee58b3cd8ecca45843aea267ff06c1a6b967

SHA512
c65630d091bc339bd37729b563e3ed489752421002016d57bc145f8169c110275803af6ed604bef7620b9d643ba0e425f3ae1cda7db08dc798e82a62dd3c4e76

Download Submit
C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
37KB

MD5
f9fa1f0ae36217270252a5d2ea08f6e6

SHA1
3e3cf560cacc7b87e2bd0060392dfdeb4f934d64

SHA256
8b7497456bd2eec71beab2936dc0ee58b3cd8ecca45843aea267ff06c1a6b967

SHA512
c65630d091bc339bd37729b563e3ed489752421002016d57bc145f8169c110275803af6ed604bef7620b9d643ba0e425f3ae1cda7db08dc798e82a62dd3c4e76

Download Submit
C:\Users\Admin\AppData\Local\Temp\misid.exe

Filesize
37KB

MD5
f9fa1f0ae36217270252a5d2ea08f6e6

SHA1
3e3cf560cacc7b87e2bd0060392dfdeb4f934d64

SHA256
8b7497456bd2eec71beab2936dc0ee58b3cd8ecca45843aea267ff06c1a6b967

SHA512
c65630d091bc339bd37729b563e3ed489752421002016d57bc145f8169c110275803af6ed604bef7620b9d643ba0e425f3ae1cda7db08dc798e82a62dd3c4e76

Download Submit
memory/2800-134-0x00000000005F0000-0x00000000005F6000-memory.dmp

Filesize
24KB

Download
memory/2800-133-0x00000000005F0000-0x00000000005F6000-memory.dmp

Filesize
24KB

Download
memory/2800-135-0x0000000000610000-0x0000000000616000-memory.dmp

Filesize
24KB

Download