f8c4a7fa306d83d2be74e5bc787be771bc93ecd8cd1fe354f63bd4b3cc2d2436 | Triage

Analysis

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240220-en
resource tags

arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
submitted
25/02/2024, 09:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a36839d323538d05a252120d969207ca.exe
Size

683KB
MD5

a36839d323538d05a252120d969207ca
SHA1

e6b25ff2ba0cfc115d5805803996e1fd5b585073
SHA256

f8c4a7fa306d83d2be74e5bc787be771bc93ecd8cd1fe354f63bd4b3cc2d2436
SHA512

be210a42df1523f4c75e9a478fb51c5e7a08693a0f41b4964e8a3dac3eb445339ca1c6cb24141de64a913f2e5566526f8e80b6cf9798a8e21ad21eb84f5a9426
SSDEEP

12288:ClT4UN3K3vfi4D1fJtcyURPDLYrMpwB/q568ANJ32ulJm5MtLAId6GBanq:uT4UlQiwl2RjpwB/q2J3N/ftM3GBd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a36839d323538d05a252120d969207ca.exe
"C:\Users\Admin\AppData\Local\Temp\a36839d323538d05a252120d969207ca.exe"
1⤵
PID:1640

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads