83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702

Analysis

max time kernel
141s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
23/08/2023, 04:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe
Size

519KB
MD5

cebd2eb5b97731040794dc5803c703ce
SHA1

8cbf84b7cc157c724c4c04106ddfa35342bd53c6
SHA256

83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702
SHA512

1268282ac7c84bc0e21f7d048324bc6491eadfef1c3e663f527b3ee5a33726ab9afb2a479a0560e63ba5eab7dca5e539e4bc5709dd1ea43736efc704cd5a559c
SSDEEP

12288:Qi1KnmtwuxAZIHHHHHHDmZyUBHZH0HVHHHHq1V2c6k6M:Qi1twuxAWHHHHHHDmZyUBHZH0HVHHHHw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2056	83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe

C:\Users\Admin\AppData\Local\Temp\83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe
"C:\Users\Admin\AppData\Local\Temp\83eb9c0d2d1a5323cc3ad254cb40144d06d4823739c786fe7a171768c5f61702.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2056

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2056-54-0x00000000003F0000-0x0000000000584000-memory.dmp

Filesize
1.6MB

Download