2391731915203876e404e9c684c0d0c8bac2cc16157b2b59449f2a8bf30dd3e4

Analysis

max time kernel
120s
max time network
124s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31/12/2023, 13:32

Target

3824b31f555785368664be1fe83246cb.exe
Size

106KB
MD5

3824b31f555785368664be1fe83246cb
SHA1

5bfedec95a8b9a4c03faf88a868369bbf432797f
SHA256

2391731915203876e404e9c684c0d0c8bac2cc16157b2b59449f2a8bf30dd3e4
SHA512

6e950b0d47c4648c60c361ec9a7a7cc33d9ca32414ca91e4c45bfe552f48e801ae825481042c555c53d528f16d513168844d9c96da1dede6c46334dea2205dc2
SSDEEP

3072:mgXdZt9P6D3XJbCw5Ky/9XO3jR0eWSzUu/0WH0j:me348wUQ9OzRgW/cd

Score

7^/10

Loads dropped DLL 2 IoCs

pid	Process
1740	3824b31f555785368664be1fe83246cb.exe
1740	3824b31f555785368664be1fe83246cb.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3824b31f555785368664be1fe83246cb.exe
"C:\Users\Admin\AppData\Local\Temp\3824b31f555785368664be1fe83246cb.exe"
1⤵
- Loads dropped DLL
PID:1740

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact