e5278a1bf2ad503ef5fccc2444266eceea14dbe1e03e84007c5660db3e8ab7cf | Triage

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25-12-2023 14:45

Sharing

Report Analysis Logs

General

Target

26aa500956c6a4dbe4911cbac72a99c4.exe
Size

2.5MB
MD5

26aa500956c6a4dbe4911cbac72a99c4
SHA1

58c9e0728761f1f31d0d554104331bb325209273
SHA256

e5278a1bf2ad503ef5fccc2444266eceea14dbe1e03e84007c5660db3e8ab7cf
SHA512

d33ccd393ab964c7968d95a58a7eec95f3f325d216ae6cf6e6c7e7c02384c70be2f481513cda40cd6f7acc4c0e7236e723aed64458c2c9455dfea662a5003e64
SSDEEP

49152:jBjppazB1exznkNY56LXmSPjCNeR1uOg6ulARb8fvinn+oNuGDER5kqhgeIKXpT:NqfednkNM6LWgCNeRQRkbYUnhNuiEMqB

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\26aa500956c6a4dbe4911cbac72a99c4.exe
"C:\Users\Admin\AppData\Local\Temp\26aa500956c6a4dbe4911cbac72a99c4.exe"
1⤵
PID:2544

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads