c392cdd7ffae5e7393cd850a11a5730e755e371de65f7e09a5ab96a801d15ecc | Triage

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231020-en
resource tags

arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system
submitted
15-11-2023 06:03

Sharing

Report Analysis Logs

General

Target

NEAS.9c4e6f699b50613d519b5a72b3382590.exe
Size

740KB
MD5

9c4e6f699b50613d519b5a72b3382590
SHA1

0f02fd1082596cab4c025e2de9481221c8975468
SHA256

c392cdd7ffae5e7393cd850a11a5730e755e371de65f7e09a5ab96a801d15ecc
SHA512

de37ea491d320d5b97d7746ece95c4f9284ab4859f561b1da1f632e532513ef0679cc2c77d73531b04179de6baf430d9b800da7ec238f1ce83f1f9a497ad361e
SSDEEP

12288:aD0Mo7CiWxJss9taLARsN3IQORSTBn2OOxc+jKAAaHCpCnGPo2FpZ:HMcCiWbs4tMAytI0n2OwKAAaHmvPo2Fn

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\NEAS.9c4e6f699b50613d519b5a72b3382590.exe
"C:\Users\Admin\AppData\Local\Temp\NEAS.9c4e6f699b50613d519b5a72b3382590.exe"
1⤵
PID:1816

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads