b8281363707d0cc7e37e1b2b95a243b12d941b1ca53130c83642e895d81e3947 | Triage

Analysis

max time kernel
118s
max time network
121s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
19/03/2024, 01:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

d4e1457af0b0a4aafc9b74fa9f1851b0.exe
Size

145KB
MD5

d4e1457af0b0a4aafc9b74fa9f1851b0
SHA1

6372ff4a3de7f48feece1a3955dcb300cf40733e
SHA256

b8281363707d0cc7e37e1b2b95a243b12d941b1ca53130c83642e895d81e3947
SHA512

efa001d92a3607369f8ab8a2f15216ac24b6ecccd33aa4d391923b38eed0ca9a03e40df78b5854f0caa077400e429f27564de46fc1de7bf613cb2f913f54fb1b
SSDEEP

3072:kVQosRADckJIoNRDuUlblKGKnvvrOwKON4Y/5laxxudC0Q0:kVa7ojDuUlpKGMvj/JN4YRljdCw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d4e1457af0b0a4aafc9b74fa9f1851b0.exe
"C:\Users\Admin\AppData\Local\Temp\d4e1457af0b0a4aafc9b74fa9f1851b0.exe"
1⤵
PID:1860

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1860-0-0x0000000000400000-0x00000000004B2000-memory.dmp

Filesize
712KB

Download
memory/1860-1-0x0000000000320000-0x00000000003D2000-memory.dmp

Filesize
712KB

Download
memory/1860-2-0x0000000000400000-0x00000000004B2000-memory.dmp

Filesize
712KB

Download