5058f3f4a9670e47e837a58a36413df9017a815eaadfd43bc741911ae56c5d38 | Triage

Analysis

max time kernel
120s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
15-03-2024 08:00

Sharing

Report Analysis Logs

General

Target

messenger.exe
Size

91KB
MD5

72a6d43a220aff3e2c3afc7ee86f5cad
SHA1

5869f365812f998a71b35a75cc6ac992d964c535
SHA256

2ab5a4918151220fe90dac7309173248d01cd3d2ab4dbe1712049588a0aa5cd8
SHA512

2057fceb499730dbdb5707505154180c41f0a8086ce1734f2da785a393a19875594065cdf823c0120314b924a1dd11b96195f068069e6b21f33ea74f59005767
SSDEEP

1536:PpgpHzb9dZVX9fHMvG0D3XJgulF47BLPkqIzjbanya/x6s+bMnG:xgXdZt9P6D3XJnlFQP5Kyx3tnG

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\messenger.exe
"C:\Users\Admin\AppData\Local\Temp\messenger.exe"
1⤵
PID:2044

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads