dbba9db7d8306ed11cd7ce922d99fd7967518c93fc0938695d94f8215a93c499

Analysis

max time kernel
141s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
13-03-2024 05:47

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

7774.exe
Size

2.5MB
MD5

332d0812b9b04155b5c690cf876bfde5
SHA1

b38ad54cba9609c1b242b3662fc7e83984ff17b6
SHA256

9fd2a7da8571b2c18c9e0df4a989cdc1e113816d62a68cc1e8cb0288aac42d33
SHA512

1328bac1ae05e2b315289cebcc54adb7ba9f9a74871c21664b91ca24aad551abf8a0e499bb83634c1742e552873e4d00adec9e0c9b6db7a5d278243a28e46930
SSDEEP

24576:melo5jh+9b8SL1lAdL5+FPI3YqOcHQSFablTmVfYxquGjHneFUJfKhiPv4NDPzap:/l+h+1qs0Y/BTmnuGjHnevh2g/at/

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
2008	7774.exe

C:\Users\Admin\AppData\Local\Temp\7774.exe
"C:\Users\Admin\AppData\Local\Temp\7774.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:2008

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2008-0-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download
memory/2008-1-0x0000000000400000-0x0000000000640000-memory.dmp

Filesize
2.2MB

Download
memory/2008-3-0x0000000000230000-0x0000000000231000-memory.dmp

Filesize
4KB

Download