cb76aaf73dbeee018a4ddfd89249b23e64a4b1df7b3bef812bd10e097ae70281 | Triage

Analysis

max time kernel
142s
max time network
122s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
24-12-2023 16:55

Sharing

Report Analysis Logs

General

Target

06d2101c72cebea792998c60ae8d6959.exe
Size

5.6MB
MD5

06d2101c72cebea792998c60ae8d6959
SHA1

185fcb4442876c1c88248184c7bf147aec633275
SHA256

cb76aaf73dbeee018a4ddfd89249b23e64a4b1df7b3bef812bd10e097ae70281
SHA512

88d81c01eb00f2acf4107f6fd72543e1df7dc6d21d4f3289a5b7b16843d2f980f5e19048a376ff231711bf9294b9668006776cc8395171c9d00a52c5f0f45ca5
SSDEEP

49152:kDEp7WAdvRbdTSf93aDGmwzzjLkPQVmEO3jjSiXuJO3jjViaFOstBXMoj5NymIjR:kDEl5RLPQRiXu4iaFOiBXp5NymkjNyq

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\06d2101c72cebea792998c60ae8d6959.exe
"C:\Users\Admin\AppData\Local\Temp\06d2101c72cebea792998c60ae8d6959.exe"
1⤵
PID:2224

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2224-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2224-1-0x0000000000400000-0x000000000099C000-memory.dmp

Filesize
5.6MB

Download
memory/2224-3-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download