50a579f304e99f503fd7f2a3ea7abdde6c3a7ee874d024b7fc16563e6a1cc83b | Triage

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 02:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

4c3718dac66b0032900803f85b85e62b.exe
Size

3.0MB
MD5

4c3718dac66b0032900803f85b85e62b
SHA1

557f2be3533dcd851c06ba67dc7d79257f91a31c
SHA256

50a579f304e99f503fd7f2a3ea7abdde6c3a7ee874d024b7fc16563e6a1cc83b
SHA512

061e446e908fe33173e8ab4e4a26517cb4d50184a0bf0f11eeeecde12007dc5749125be21a03cd8db719352b61bb0206af90ef2c4b4c370aad5ce6e3a9168efe
SSDEEP

49152:KsbsLaHq5YEyQNiMTC1XFylTiZGJHzxikLoRMCA66zOyBg5c0AjLU449LfrWIAzv:fblHq2fQoWC11GqGJ5L+MCA6K9Bg57YB

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\4c3718dac66b0032900803f85b85e62b.exe
"C:\Users\Admin\AppData\Local\Temp\4c3718dac66b0032900803f85b85e62b.exe"
1⤵
PID:1720

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads