57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f

Analysis

max time kernel
132s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
20-12-2023 03:30

Target

57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f.exe
Size

2.7MB
MD5

81b7ed64271299e337887499b707e79c
SHA1

56e545c2e6f4997cc19d7dcfa7fb76df17db80c9
SHA256

57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f
SHA512

7b361c3921a80854c3313e956451e5da040b2faec80c6dde919e5d05e39a374238bfc53dfb6ddf8250a17c1af4b99c6fe40e39c9618ef75f04eeb2cc520ea7c1
SSDEEP

49152:q3q7eN/sPgDU6dj+m+wT9GVoxDyVnFcp0oYPa3/l2tbHm7U7:qpN0PgDUZm+g9GVoxWZFOx

Score

4^/10

Drops file in Program Files directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\imyfone_down\57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f\Log\imyfone_down.log	57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f.exe
"C:\Users\Admin\AppData\Local\Temp\57e25bf62b0ee2ac77f33d915996e2a65236b656a0d04aab0c94de959d814c7f.exe"
1⤵
- Drops file in Program Files directory
PID:4676

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact