7304b1410ec185b79e23ea46c297bbd43767cd45ed27797d2ec15b26de978585

Analysis

max time kernel
11s
max time network
133s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
26-12-2023 07:29

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

5c91c8af6cc7ab7d68e5f22bcc0af768.exe
Size

1.2MB
MD5

5c91c8af6cc7ab7d68e5f22bcc0af768
SHA1

7d7f82193d9cdede8d71058cefcf61049ad6405e
SHA256

7304b1410ec185b79e23ea46c297bbd43767cd45ed27797d2ec15b26de978585
SHA512

57a6d5bad9c863c93fb76b7ec63097fd5f56821772760a478bdd2fef0f621443488a11c01d10c381d99893520d7796f825557d79f32b32255b634c7cd58870e5
SSDEEP

6144:Ye34MvEq1zQbe9DP3lpr4jAxLY6MTEVagKZ:RVzQcbRx9BVP4

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 5 IoCs

pid	Process
2344	5c91c8af6cc7ab7d68e5f22bcc0af768.exe
2344	5c91c8af6cc7ab7d68e5f22bcc0af768.exe
2344	5c91c8af6cc7ab7d68e5f22bcc0af768.exe
2344	5c91c8af6cc7ab7d68e5f22bcc0af768.exe
2344	5c91c8af6cc7ab7d68e5f22bcc0af768.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5c91c8af6cc7ab7d68e5f22bcc0af768.exe
"C:\Users\Admin\AppData\Local\Temp\5c91c8af6cc7ab7d68e5f22bcc0af768.exe"
1⤵
- Loads dropped DLL
PID:2344

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2344-28-0x0000000001CB0000-0x0000000001CC2000-memory.dmp

Filesize
72KB

Download
memory/2344-69-0x0000000001CB0000-0x0000000001CC2000-memory.dmp

Filesize
72KB

Download