1803f2b06149d09d568a0d83cab8017925aded03047791dc92d8254de7b2262a

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
16/04/2024, 11:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

ipconfig.exe
Size

28KB
MD5

efad0aeb4859b90a8fd25d30f7cb253b
SHA1

8ad80c59ee4d9459c112446762320da7ae2d24f0
SHA256

1803f2b06149d09d568a0d83cab8017925aded03047791dc92d8254de7b2262a
SHA512

69ff654be934bdb24b8cd9859843dd6da2e82892220226c203ac969fb5605b7f847e4815854a8e3ee628300e0f265357280d6719d84535140261dc2c50647e9e
SSDEEP

384:kSTbXHl9D4Yi9ntDqFHj+4Dj/UVWsP4sqLl9vjxsvXgmfqB/uNpyDi4b90RWJGWz:kMTi9dqtNjsVWsPGlRqvjyDb9X

Score

1^/10

Malware Config

Signatures

Gathers network information 2 TTPs 1 IoCs

Uses commandline utility to view network configuration.

System Information Discovery

T1082

Command and Scripting Interpreter

T1059

pid	Process
228	ipconfig.exe

C:\Users\Admin\AppData\Local\Temp\ipconfig.exe
"C:\Users\Admin\AppData\Local\Temp\ipconfig.exe"
1⤵
- Gathers network information
PID:228

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Windows 7 deprecation

Loading Replay Monitor...