3c33b5e62c193ba92cd963aa56a4e6095873562976e8785a853a0fff150bc2a4 | Triage

Analysis

max time kernel
0s
max time network
149s
platform
windows10-1703_x64
resource
win10-20231215-en
resource tags

arch:x64arch:x86image:win10-20231215-enlocale:en-usos:windows10-1703-x64system
submitted
05/01/2024, 15:31

Sharing

Report Analysis Logs

General

Target

MacroCreator/Lang/lt.lang
Size

71KB
MD5

12a3b202793a806636a8cf5b1948f47b
SHA1

a2e96a80fefab4efc55e25b31361006805029544
SHA256

c040142dd79e33519db6c80725234cc9e40f7b8d8a2d019fa137353633ccafdb
SHA512

1d7d33bfeca3a26f9804e29a1579087fead7c22e81140ea428b78e9fd8a16732b4352543ba2103c3e09eea3b3f2832a6891fdfd92b00f4b051826d59cbceed6f
SSDEEP

1536:8IpbI38tBE12K5YYyw9tSLY4LJ0KvicjTc0Tct9M4lBwVf4B+qs85qYkFtVMBjfJ:8IpbI38tBE12K5YYywLSLY4LJ0KvicjK

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\MacroCreator\Lang\lt.lang
1⤵
PID:1644

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:4216

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads