1041b02fb84b243845de52b2d9d0b192be9dbb2b30cae848a7891083a79e3f00 | Triage

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 09:04

Sharing

Report Analysis Logs

General

Target

13c29ebe2c182860ff5ad49fbebef9d2.exe
Size

191KB
MD5

13c29ebe2c182860ff5ad49fbebef9d2
SHA1

1bd44bd191e88f1bed18ddb609988c77ce3a177e
SHA256

1041b02fb84b243845de52b2d9d0b192be9dbb2b30cae848a7891083a79e3f00
SHA512

c8a51dfaa768e5cf1b50f976090c903235ef609ee6f041a5e078b9a02b04a62b0d2cdbc6d3a677f182ea3f5f555f51747487d87b02850ff11df3b906a7771377
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d2:HAVySV1eY4k437d+4wkTHdS2+

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\13c29ebe2c182860ff5ad49fbebef9d2.exe
"C:\Users\Admin\AppData\Local\Temp\13c29ebe2c182860ff5ad49fbebef9d2.exe"
1⤵
PID:2496

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2496-1-0x0000000000B10000-0x0000000000B11000-memory.dmp

Filesize
4KB

Download