3f0e610c053d163cc7e006457984121bb47de15a9581b0e12ce1ec2b2bbb7c28

Analysis

max time kernel
1s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
26/12/2023, 11:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69421120aa21f8013cf9265c1c13f9e0.exe
Size

68KB
MD5

69421120aa21f8013cf9265c1c13f9e0
SHA1

8e4411cda4dab03bc542892243090b8829f3b76f
SHA256

3f0e610c053d163cc7e006457984121bb47de15a9581b0e12ce1ec2b2bbb7c28
SHA512

c1f05b835e54b70b8718fa3cd734bfeeba05a90065ac75538878980643be78e9f92e64505fb01b21a6b2de99e4594a8117e070eb0c67672259187b1ffed1b603
SSDEEP

1536:UqdubTEdWbawyxdpyOoiRp8dkSYjxW4oLaZ1rwb+Pe7:UXPEdWudNLpekSinyArwA2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\69421120aa21f8013cf9265c1c13f9e0.exe
"C:\Users\Admin\AppData\Local\Temp\69421120aa21f8013cf9265c1c13f9e0.exe"
1⤵
PID:2488
- C:\Users\Admin\AppData\Local\Temp\loginsystemauths0.exe
  "C:\Users\Admin\AppData\Local\Temp\loginsystemauths0.exe"
  2⤵
  PID:616

C:\Windows\SysWOW64\arp.exe
"C:\Windows\System32\arp.exe" -a
1⤵
PID:3024

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\loginsystemauths0.exe

Filesize
28KB

MD5
773bc4883008350287a55ccaa2f32202

SHA1
77025701fd68abbb2b77e0246c22e9317f1c5440

SHA256
33df1bb5bf3e6ab524c044e146a07cd51e6dea1391778997601354a14dd33cf0

SHA512
b4414468b3f57236d1f83f40e0acf16440de70051ee2e55a0a276addb0bcdcb7409d649920b8103e85b09a20d404c018a9e84a653cce00e5317be7cef1bf9901

Download Submit
memory/616-24-0x0000000075390000-0x0000000075B40000-memory.dmp

Filesize
7.7MB

Download
memory/616-21-0x0000000075390000-0x0000000075B40000-memory.dmp

Filesize
7.7MB

Download
memory/616-23-0x0000000004A20000-0x0000000004A30000-memory.dmp

Filesize
64KB

Download
memory/616-22-0x00000000001F0000-0x00000000001FE000-memory.dmp

Filesize
56KB

Download
memory/2488-3-0x0000000005130000-0x00000000056D4000-memory.dmp

Filesize
5.6MB

Download
memory/2488-7-0x0000000004DC0000-0x0000000004E16000-memory.dmp

Filesize
344KB

Download
memory/2488-6-0x0000000004D10000-0x0000000004D1A000-memory.dmp

Filesize
40KB

Download
memory/2488-5-0x0000000004D50000-0x0000000004D60000-memory.dmp

Filesize
64KB

Download
memory/2488-4-0x0000000004B80000-0x0000000004C12000-memory.dmp

Filesize
584KB

Download
memory/2488-0-0x00000000000D0000-0x00000000000DE000-memory.dmp

Filesize
56KB

Download
memory/2488-2-0x0000000004AE0000-0x0000000004B7C000-memory.dmp

Filesize
624KB

Download
memory/2488-20-0x0000000075390000-0x0000000075B40000-memory.dmp

Filesize
7.7MB

Download
memory/2488-1-0x0000000075390000-0x0000000075B40000-memory.dmp

Filesize
7.7MB

Download