d2c736fc70a887dda619b0098ee25efbc75093bd7f4d2937a08e70be8e66f1ec | Triage™

Resubmissions

24/03/2024, 15:56

240324-tdd77agc8w4

24/03/2024, 15:54

240324-tch5rade983

24/03/2024, 15:47

240324-s8k4jsde857

Analysis

max time kernel
133s
max time network
136s
platform
windows10-1703_x64
resource
win10-20240221-en
resource tags

arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system
submitted
24/03/2024, 15:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
dark/cursor/vert.cur
Size 4KB
Sample240324-s8k4jsde85
SHA256 90aa8ee5857ee1a0f0830f9c9769965597bcce209da2fdd4c5d3c0d1de91fd8b
MD5 3e6d4ab23ddd57a54755d1af1bd28f26
SHA1 c69bb725d552f5b9ce96d480bc06e2b25b68e71f
SHA512 ed1134106e441df255dbbb8f940a7937d23b6025e5713bbf0200c3ef080ee89fb262b8dc9602c1ecc461898d3a2169ff01eec939cbc90509a727d4730a6a6aa8
SSDEEP 48:yqSrbcofiCH363K1OwnCPqZd5qZ/u2DFS5EesjKXDgqMGLBY:yRrbcoKCq61OwCPsd5q/ZOXDgJGO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\dark\cursor\vert.cur
1⤵
PID:2644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads