dd666b6047ac2d5d15a058fb846c5fbab7f617562e4a71218d423c82ec4b1667 | Triage

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
26/12/2023, 14:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

76bc234546e1b66bb2b1ce662348460e.exe
Size

2.8MB
MD5

76bc234546e1b66bb2b1ce662348460e
SHA1

2a5b809c9bfe4b01f061096a50be08c0304fb573
SHA256

dd666b6047ac2d5d15a058fb846c5fbab7f617562e4a71218d423c82ec4b1667
SHA512

99614665a46774b2448e1e07a79ba3ef471858b8bf797ff584cfde1de13bff03889e29128c734b4e3ad846ef8fa684fe53cf64d2db75a65831a2a003da351c15
SSDEEP

49152:60kcK1H6umtOryVBNlxog68mFM1gcfPe1xzxXshW1H6umtOKQ:6796vtOryVB3M8mOdnOz2g6vtOL

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\76bc234546e1b66bb2b1ce662348460e.exe
"C:\Users\Admin\AppData\Local\Temp\76bc234546e1b66bb2b1ce662348460e.exe"
1⤵
PID:3032

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3032-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/3032-6-0x0000000000530000-0x0000000000531000-memory.dmp

Filesize
4KB

Download
memory/3032-7-0x0000000000400000-0x0000000000465000-memory.dmp

Filesize
404KB

Download