dd1bc503a2b531fb490a88ffd408deafef3d70e908ddb0a27ea70f1e082a0a9c

Analysis

max time kernel
140s
max time network
119s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 03:49

Target

7406.exe
Size

2.4MB
MD5

8bb6379aa653a99521a4b7a853af483d
SHA1

cb37250d58ac622de793644f6538e47d9b829eb6
SHA256

634bd4948cc95a3c3888d02a251562133a7c56827407b17d7817ee1272010a7e
SHA512

07e646325b0d1c66f3ece327507654359902bbf1085b8d1207b7f93de8d92631fb743aed2f8bb1eeb8702a85f9ee205f35b09ae8ddd363a587741107e41e6208
SSDEEP

24576:qelo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfKxquGjHneFUJfKziSRlWyIK0:jl+h+1qs0Y/BTm1uGjHnevzzbtc

Score

3^/10

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2216	7406.exe

C:\Users\Admin\AppData\Local\Temp\7406.exe
"C:\Users\Admin\AppData\Local\Temp\7406.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2216

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

memory/2216-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2216-1-0x0000000000400000-0x0000000000640000-memory.dmp

Filesize
2.2MB

Download
memory/2216-3-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download