bb1497f74174f6a1487d56c93ef765cf82a273f80c7b38b91d157de6fb99acbf | Triage

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 12:12

Sharing

Report Analysis Logs

General

Target

1d61ce7780f499b4026ceecdb32ec840.exe
Size

388KB
MD5

1d61ce7780f499b4026ceecdb32ec840
SHA1

1d570724d6588cc7334dda4b4d1442da7bebf0de
SHA256

bb1497f74174f6a1487d56c93ef765cf82a273f80c7b38b91d157de6fb99acbf
SHA512

7e00424f3eadcc6731bf7c643450d0572233975010a227bcc667f36fc948ff8c0f2cecb5deff242e0e6d4d7434d708765a733e900485794f54ea11a6de0ec8d2
SSDEEP

1536:FMVI6utFCRw/BONSZw1cG5/9aj1Q8xa/8yn/CM78kkkkkkkkkkkkkkkkkokkkkk1:FMSQgGR9SQ0dZy+WQDFFUC/k

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1d61ce7780f499b4026ceecdb32ec840.exe
"C:\Users\Admin\AppData\Local\Temp\1d61ce7780f499b4026ceecdb32ec840.exe"
1⤵
PID:1244

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1244-0-0x000007FEF6090000-0x000007FEF6A2D000-memory.dmp

Filesize
9.6MB

Download
memory/1244-1-0x0000000000AD0000-0x0000000000B50000-memory.dmp

Filesize
512KB

Download
memory/1244-2-0x000007FEF6090000-0x000007FEF6A2D000-memory.dmp

Filesize
9.6MB

Download
memory/1244-3-0x0000000000AD0000-0x0000000000B50000-memory.dmp

Filesize
512KB

Download
memory/1244-4-0x000007FEF6090000-0x000007FEF6A2D000-memory.dmp

Filesize
9.6MB

Download