678d74874a7909a6153357674e097b58b0b7ceec7d353913c99beedaf3c3b083 | Triage

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 18:12

Sharing

Report Analysis Logs

General

Target

QQ炫舞牛牛[３.０.５版本]高分增10.7 A版.exe
Size

566KB
MD5

0d422c0c8ede63630a03a2b4d349099c
SHA1

5dfdb2fe35d0a8d57cd278ed6b8abff678aca911
SHA256

6810bd8e9c77be4cfc04f09c68f5b2c3cd97ed67631debaa38f5e2924eefdcdb
SHA512

9f850fef2707e03127ef7983ffa0e6396a61e50ac77ebedcca3463d2ac073acb2f513486455169eaccd53eff0ee10e6d3afe6859c4f31a924644412cfbd8c49a
SSDEEP

12288:/weX0WgQfaEIfklrDLudOSedmMD+XfTvGysLaDyRCytBTLebzv9b3s/:SWgQfaFfCrDLuAdmMDMrvTzDaFLTSNbm

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\QQ炫舞牛牛[３.０.５版本]高分增10.7 A版.exe
"C:\Users\Admin\AppData\Local\Temp\QQ炫舞牛牛[３.０.５版本]高分增10.7 A版.exe"
1⤵
PID:2660

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads