5d65b3627cd18a5e002206a7ccb8563b09870262507b7b87998e50612786f812 | Triage

Analysis

max time kernel
120s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14-02-2024 04:06

Sharing

Report Analysis Logs

General

Target

9ab6c366e9808812d62e0745fdfbcaa4.exe
Size

156KB
MD5

9ab6c366e9808812d62e0745fdfbcaa4
SHA1

a22990d191b390675654d05e2a1348c531e2f33c
SHA256

5d65b3627cd18a5e002206a7ccb8563b09870262507b7b87998e50612786f812
SHA512

9356ca8829b8684de313be615ec9639eb2a2667e3aa690fda677698eab316c02d5288c7b694668540449840e984e96cc29ffb915f7448cdc747f2306c71dcb54
SSDEEP

768:Abm7T/lcSZoPgNhue+4uJt3TnErWoA+b1OYtqjpCJc8TyOp19cybsfTM:FZ6g7ux4uJt3TcFA+b1O3Cq8Ty+AZTM

Score

8^/10

Malware Config

Signatures

Modifies RDP port number used by Windows 1 TTPs

Remote Desktop Protocol
T1021.001

C:\Users\Admin\AppData\Local\Temp\9ab6c366e9808812d62e0745fdfbcaa4.exe
"C:\Users\Admin\AppData\Local\Temp\9ab6c366e9808812d62e0745fdfbcaa4.exe"
1⤵
PID:2148

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Remote Services

Remote Desktop Protocol

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads