da78ddf077a51c77d33104afd7430a77a68cc92ef7c3c5a430b60db0a4c7c734

Analysis

max time kernel
147s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
29/02/2024, 07:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

da78ddf077a51c77d33104afd7430a77a68cc92ef7c3c5a430b60db0a4c7c734.exe
Size

843KB
MD5

c5950edc3b3db19a94992a9639fe9b74
SHA1

9c6006b6bf731b0a69b1dafce6c207f58316b547
SHA256

da78ddf077a51c77d33104afd7430a77a68cc92ef7c3c5a430b60db0a4c7c734
SHA512

16e78f5fbdfd1c454e8b71ac6875daea65559dce4e3a8ffd2f49b43a6719103c249f7abab5746af86ef7144e33aca84ca3012b89b7834d870854753de27ec329
SSDEEP

12288:O4lsXvtCcmVVXzzn4PJAahPl/QEdIMiVbHydETJnJWkY9o7x1q9MmCS:O4lavt0LkLL9IMixoEFNYGx1q9MmCS

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
behavioral2/memory/3004-0-0x00000000009B0000-0x0000000000A89000-memory.dmp	autoit_exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\da78ddf077a51c77d33104afd7430a77a68cc92ef7c3c5a430b60db0a4c7c734.exe
"C:\Users\Admin\AppData\Local\Temp\da78ddf077a51c77d33104afd7430a77a68cc92ef7c3c5a430b60db0a4c7c734.exe"
1⤵
PID:3004

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3004-0-0x00000000009B0000-0x0000000000A89000-memory.dmp

Filesize
868KB

Download
memory/3004-1-0x0000000001280000-0x0000000001281000-memory.dmp

Filesize
4KB

Download