6e5224d4e25e6372ae997432dbe07d3cf756fd16a2b57ef6ccd40a40f3a88c60 | Triage

Analysis

max time kernel
142s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 06:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3c1760236eb5e29ef92b1c8041f370e3.exe
Size

1.3MB
MD5

3c1760236eb5e29ef92b1c8041f370e3
SHA1

b2153d8d9d45ed3b5eec93e49f5daa88c1d2cf2b
SHA256

6e5224d4e25e6372ae997432dbe07d3cf756fd16a2b57ef6ccd40a40f3a88c60
SHA512

667cf71f3f8103c306d1bbae4ac5dbd4b952f8f66ef22952835c745ca4e9b8d089c9d716af286d6566520199e7f34e7bc33cbb2b63c5f1cb683f4b1db3b904c7
SSDEEP

24576:o2mIKVnwR/yBsHJOQltLQ0oMPawUE7Vqghnw5LNeQrp/12kPNuh:1mh5BsIQaMPaA7VqgmLrp/12WNuh

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3c1760236eb5e29ef92b1c8041f370e3.exe
"C:\Users\Admin\AppData\Local\Temp\3c1760236eb5e29ef92b1c8041f370e3.exe"
1⤵
PID:1396

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1396-0-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download