dc20f5f0d5e0ae84dfd7aa95f9b7794debe7eb6e3d14ade5e0a0090de23764c2 | Triage

Analysis

max time kernel
121s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 06:24

Sharing

Report Analysis Logs

General

Target

0b67eccab29935d5f0a7e1a8cb799210.exe
Size

847KB
MD5

0b67eccab29935d5f0a7e1a8cb799210
SHA1

6ce62a1ce02c9f58172d9a836823eeca6a7fbfe6
SHA256

dc20f5f0d5e0ae84dfd7aa95f9b7794debe7eb6e3d14ade5e0a0090de23764c2
SHA512

9a155a546d53d0896b2bce18ac0eee7947672917e1d61f64d05be73d278667b67d77198656aacc881f99585af4f7c980475964c0ffedcec1fc69d8eded945c69
SSDEEP

24576:CT4UlHz1njQyVgP1iod0+tG3DCcot3umm8XK1Zv0tLH:GH5E62PFGzCcot3LT6HyH

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\0b67eccab29935d5f0a7e1a8cb799210.exe
"C:\Users\Admin\AppData\Local\Temp\0b67eccab29935d5f0a7e1a8cb799210.exe"
1⤵
PID:2408

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads