28a2ab4f952609102be44d42e83d08dd8f2d0723130cc33a8685c78b14d2f2d7 | Triage

Resubmissions

03/10/2023, 16:35

231003-t3ng6adf4w 3

03/10/2023, 16:31

231003-t1p8zafe39 3

Analysis

max time kernel
363s
max time network
366s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
03/10/2023, 16:35

Sharing

Report Analysis Logs

General

Target

office2010.exe
Size

5.0MB
MD5

b125ef2fb8883fc99a061fad81390b17
SHA1

b1bcdffc209046020d5c6abc1bf494dee1bec04e
SHA256

28a2ab4f952609102be44d42e83d08dd8f2d0723130cc33a8685c78b14d2f2d7
SHA512

b142423cbb791204fb5641c985c996c495958f61161b5a6cf213c48e6d94880e9ba3df64a71af25760cb7321c9bdc6bde557492a12cf1cbeb02ad091ff303790
SSDEEP

98304:2aVNsDu0DEUNpHP5OV2etaQGRQF2B89H1HyrmcsCl806eKRRdXa0O6y:24yuAX+bMQz2keeCSVf5nO6y

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\office2010.exe
"C:\Users\Admin\AppData\Local\Temp\office2010.exe"
1⤵
PID:2184

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads