609d0a8a53b67eb32f1742b20628c09b5c3ac9f6d0f0f7c956ce7ec10d5b32d8 | Triage

Analysis

max time kernel
122s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 00:22

Sharing

Report Analysis Logs

General

Target

460db3f7b157987e5c988757663e04a9.exe
Size

5.6MB
MD5

460db3f7b157987e5c988757663e04a9
SHA1

467af4437f3236f2f787ec711742e3da92f34277
SHA256

609d0a8a53b67eb32f1742b20628c09b5c3ac9f6d0f0f7c956ce7ec10d5b32d8
SHA512

f6905b005e0ef291d0028c1ece92cf0245fcb61a892805b2434f61e98f570149681f7c3cddfa1d07eb6b671fb98b3c754280e7a860f285fa4ec5dfc29f7aefa9
SSDEEP

98304:bx5A5kSx9l3SbF6YKENq1b3iyC4QIUqejB44cOo2KHPORFwbnhfRXaa:bxG5kSx9lY6bENqBiyC4RV4rKvOvwbhX

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\460db3f7b157987e5c988757663e04a9.exe
"C:\Users\Admin\AppData\Local\Temp\460db3f7b157987e5c988757663e04a9.exe"
1⤵
PID:2932

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads