c5dbbddd1193c7adca1e30cd17b8c7af6a76c406dd84dc164bb959c135f1aa70

Analysis

max time kernel
0s
max time network
3s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
19-07-2023 13:03

Sharing

Reason

platform exec: image=C:\Users\Admin\AppData\Local\Temp\ipconfig.exe command="C:\Users\Admin\AppData\Local\Temp\ipconfig.exe" wdir=C:\Users\Admin\AppData\Local\Temp Payload error: %1 is not a valid Win32 application.

Report Analysis Logs

General

Target

ipconfig.exe
Size

34KB
MD5

3d33188ecd39ecfeea2e08996891c76e
SHA1

80d6d97b90bccdd9de6301e074a8ef2f5b8f600c
SHA256

c5dbbddd1193c7adca1e30cd17b8c7af6a76c406dd84dc164bb959c135f1aa70
SHA512

5404cfb23f038441617582f6840368c0911764d3c2932e8d1e565f9ba04a9d64918895395a63d4d2d78164863b10228a231fd56957ef7bf45ae3ed7894e6d79e
SSDEEP

768:u23HOsYksucX/iBYuoQeR38BgCnkkYIb9V:ZHO7eYuqR38BFkfc9V

Score

1^/10

Malware Config

Signatures

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command-Line Interface

T1059

pid	Process
2504	ipconfig.exe

C:\Users\Admin\AppData\Local\Temp\ipconfig.exe
"C:\Users\Admin\AppData\Local\Temp\ipconfig.exe"
1⤵
- Gathers network information
PID:2504

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Command-Line Interface

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads