9cc78b900dbd615bb1a155b31bb78a57d5fcc73b202a7346d89907ae60703342 | Triage

Analysis

max time kernel
140s
max time network
118s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
30/12/2023, 20:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1c3843deeac8630ed3965b6fdd8a1efa.exe
Size

4.4MB
MD5

1c3843deeac8630ed3965b6fdd8a1efa
SHA1

909c9ca2c49976e94abe9e34036a66f67783d26b
SHA256

9cc78b900dbd615bb1a155b31bb78a57d5fcc73b202a7346d89907ae60703342
SHA512

be8788520e0e4a379b063ecf8a3c4ad588a90b1d1fd6a4a5c8fb303ab7ae0ab63b0a613f0285277954b2dcb555ec858e87a5e854aa24ca0089463bd2e44a1f98
SSDEEP

98304:Xqx80XnQaOnlBquAbMmCxGIjPPBeTqchgO6OMY1wEwrIPi:XqHQamkqsIjP8eq31wEwrIPi

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1c3843deeac8630ed3965b6fdd8a1efa.exe
"C:\Users\Admin\AppData\Local\Temp\1c3843deeac8630ed3965b6fdd8a1efa.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1972-0-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download
memory/1972-2-0x0000000000400000-0x00000000005C1000-memory.dmp

Filesize
1.8MB

Download
memory/1972-4-0x0000000000220000-0x0000000000221000-memory.dmp

Filesize
4KB

Download