6d0baf373654edf5222560a0e48ce2e4dbac9fd0e65fa46cf6533906f3da80af | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 07:53

Sharing

Report Analysis Logs

General

Target

5daea8a9ad63e412acdaf7fba387d999.exe
Size

979KB
MD5

5daea8a9ad63e412acdaf7fba387d999
SHA1

e93648191cc3735ae1e8ef7fc885dcd60f53ec25
SHA256

6d0baf373654edf5222560a0e48ce2e4dbac9fd0e65fa46cf6533906f3da80af
SHA512

830cf2f220e2c7c1eb0ad9543d9a352f70c0b9611e259da686ea4c16c5f876f84b80b94d2eb5acb26171eb2b9681d4885fdcab15f54e035ddedc4656ab8710a4
SSDEEP

12288:ePSrg3X/yHyKBUZDwk8Z2L0dGtHtbhubB2IyknwsewDf7MrOTxL58Cqv5zsJ7GI9:Hr2aCZxq2Ig/bkgI/nplNd8/Bz47n

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5daea8a9ad63e412acdaf7fba387d999.exe
"C:\Users\Admin\AppData\Local\Temp\5daea8a9ad63e412acdaf7fba387d999.exe"
1⤵
PID:1820

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads