79d352413ec91e3c74925718fd3a7e8d6f234d62a2ceffb6a1e7c5b257ec48e9 | Triage™

Analysis

max time kernel
122s
max time network
141s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
24/02/2024, 17:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
$0/ILPluginScanner32.exe
Size 2.6MB
Sample240224-vkn7eaha52
SHA256 8bda879bbd06e239ef0063731a3246896c95d269aee5d5bd0dd4050b5b260704
MD5 16adf1344d2d2aae4d87b17e9957c5b3
SHA1 e2b58ba0e2b3632a1b36989fbd17bd195d9fda09
SHA512 5ca370e5688f93de93bcb1346d804b55d9933ce2e42b53b6005277b0f3b9e3e6d323bf872d97138830bdb1515cf05bc0fd772ca8dc09d3d9bf894f9c42d996cb
SSDEEP 24576:IeowHAgPCvLMe2T1693ZiOsOWU2x8X6EcxI/ioMGkLqSTq0xoRf:Ieo2AgPCvBTPi9x4MGkLqST/iRf
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$0\ILPluginScanner32.exe
"C:\Users\Admin\AppData\Local\Temp\$0\ILPluginScanner32.exe"
1⤵
PID:2476

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads