20bc1c63ba52434543357e51f6143e5e1e4fdfaa5d14f4768ab2d0e7b35a1475

Analysis

max time kernel
144s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 14:16

Target

24c6e3ca5d60cf6f3e916daa3c71bc57.exe
Size

2.0MB
MD5

24c6e3ca5d60cf6f3e916daa3c71bc57
SHA1

c6ed217e8e6ab45cb4e8ca0452010130bfb2245c
SHA256

20bc1c63ba52434543357e51f6143e5e1e4fdfaa5d14f4768ab2d0e7b35a1475
SHA512

ca192a95fbd9af212c8bb0531312a193d71b6de84119b7dd8279aa53fd95888909b368c73432f8f0b62389afe230b9728c085976780d734b03ac90e518fe94c7
SSDEEP

49152:5rvPcrjPlesxE/8lJCXrZKPv3AsHtYzxlXsgIdcabb4NRKQzSwP+1v/I:5j0rjlOW0XlKPPFtYrXWc2bPQGwyvA

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\24c6e3ca5d60cf6f3e916daa3c71bc57.exe
"C:\Users\Admin\AppData\Local\Temp\24c6e3ca5d60cf6f3e916daa3c71bc57.exe"
1⤵
- Loads dropped DLL
PID:1156

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact