26eaf353a809fc22a256e36ec44db2520c8668e3bb6b2c0c879a1ea6455a1bcc

Analysis

max time kernel
150s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
13/03/2024, 14:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c61a9caadab02efaf5408859e701d9a2.exe
Size 8.8MB
Sample240313-rrl4vafa61
SHA256 26eaf353a809fc22a256e36ec44db2520c8668e3bb6b2c0c879a1ea6455a1bcc
MD5 c61a9caadab02efaf5408859e701d9a2
SHA1 14e924e1c49b76e81a1f625df69337eeb6e2abea
SHA512 dcdc8bd083796f08c8021388a6e607e9d34192f24507c4529d507676198d576398df3564a1947412af7a13cd1fb3ceeb01f44f940b9e5d7cefb06739c14348fa
SSDEEP 196608:4MuIOak62iBbxLLjb29ym/I79LxjATv0WntjzWecJ:X7tbBI/61+v0q1zbcJ
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c61a9caadab02efaf5408859e701d9a2.exe
"C:\Users\Admin\AppData\Local\Temp\c61a9caadab02efaf5408859e701d9a2.exe"
1⤵
PID:1176

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1176-0-0x0000000000830000-0x0000000000831000-memory.dmp

Download

memory/1176-1-0x0000000000400000-0x000000000055F000-memory.dmp

Download

memory/1176-3-0x0000000000830000-0x0000000000831000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads