71a0e0b625055236d70586c163d41b61ca4ded9e6fcaf37b9a0d33deb5d33e26

Analysis

max time kernel
19s
max time network
52s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 00:41

Target

472577821e1391d66aa21df664d710af.exe
Size

19KB
MD5

472577821e1391d66aa21df664d710af
SHA1

7a7ba385efb9ff61099c7ddf14bb7ea24c9f965c
SHA256

71a0e0b625055236d70586c163d41b61ca4ded9e6fcaf37b9a0d33deb5d33e26
SHA512

1552e9092df343fd3e51f6027c045e955e1fbfe78c3d69e30c1aee999a45cd7f64f0b2abbdf01e5bf75aaf8bba66803ce383cd6f49cb770cf2a05c085d6df2eb
SSDEEP

384:Liyr3LG94v8fkX2bXghvIBRWdWTcHHkcnydwYTO83PYbdf4nruo:L3y9+8q2bzjjkydnqbdfIL

Score

4^/10

Drops file in Windows directory 2 IoCs

description	ioc	Process
File created	C:\Windows\NETVISION.exe	472577821e1391d66aa21df664d710af.exe
File opened for modification	C:\Windows\NETVISION.exe	472577821e1391d66aa21df664d710af.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\472577821e1391d66aa21df664d710af.exe
"C:\Users\Admin\AppData\Local\Temp\472577821e1391d66aa21df664d710af.exe"
1⤵
- Drops file in Windows directory
PID:2132

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact