a5635510793d8fb75d6dc19005d790df78f97093278872dd6725115e726bfbd2 | Triage

Analysis

max time kernel
240s
max time network
296s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 14:31

Sharing

Report Analysis Logs

General

Target

25c1e7431893a280956b892c2296a876.exe
Size

6.4MB
MD5

25c1e7431893a280956b892c2296a876
SHA1

c3c6fcd28a34d3d2920d0e768cbe9cd38424fa61
SHA256

a5635510793d8fb75d6dc19005d790df78f97093278872dd6725115e726bfbd2
SHA512

0a2d2099c8102fbffb63188eec9bc58800f2f644730e66755664faa7d8f990e225fba5ae9a267c1b53fe651652df4a0d9b0b2a44643cc037122a4d67d9fc72c3
SSDEEP

98304:luszpZGgMhv+5aR+uPCkQ4YCZL3zNc6a9Zpn6d/3VrDkk4EdKy3NixJ9p7:ldlAr254tQEOD3YdPlDkpA3ynd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\25c1e7431893a280956b892c2296a876.exe
"C:\Users\Admin\AppData\Local\Temp\25c1e7431893a280956b892c2296a876.exe"
1⤵
PID:2772

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads