121adc4ae02a3d47ab283290e698d68487c0d87e13fe2913715fd9cdfcbf3e51

Analysis

max time kernel
3s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 19:23

Target

37a2a5480e3bc0b3e9503306dad4cc74.exe
Size

292KB
MD5

37a2a5480e3bc0b3e9503306dad4cc74
SHA1

9494f63d89e08a6d2d6122568346fb1301664c8b
SHA256

121adc4ae02a3d47ab283290e698d68487c0d87e13fe2913715fd9cdfcbf3e51
SHA512

a4bcd7ecb388bf21a61782a7d1786c1fd9e1213af3e1edb5bf2454ccb68ade2c9616411976449cdc30b3faa7dfbd9b0b0e7eeb6e4f29638d7924b4615ed9156d
SSDEEP

6144:tQ3B9QQ8nM3DoFFjuvf/toNQ8dqLuJoU0U7Hd8CntQOHHM+HFFTjXdpNnT28:g9QfnM3D0Fw/tN8dkmLtpHHHrh7n

Score

7^/10

Loads dropped DLL 3 IoCs

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\37a2a5480e3bc0b3e9503306dad4cc74.exe
"C:\Users\Admin\AppData\Local\Temp\37a2a5480e3bc0b3e9503306dad4cc74.exe"
1⤵
- Loads dropped DLL
PID:2876

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact