6b419e21fad4a017b11cdde3e9358cd1ad872d47f9dbd905106d555acc111c18 | Triage

Analysis

max time kernel
150s
max time network
170s
platform
windows11-21h2_x64
resource
win11-20240419-en
resource tags

arch:x64arch:x86image:win11-20240419-enlocale:en-usos:windows11-21h2-x64system
submitted
30-04-2024 08:50

Sharing

Report Analysis Logs

General

Target

Torrent Game/data1.exe
Size

100.0MB
MD5

ff6a31844637ffb384e20d2a2aba0b63
SHA1

51c1b62e10358fb1a0cc4904fd35a521373ce8c9
SHA256

f993de8c7062c78b2a2be059069c8543dc4fe27ec288a621be0d9807adecf687
SHA512

6ac68041344ebcf189ac52039cce4b43eb7ad7c96908ac833bfd7875f09eae655bf1814eebbbcd47b9d0fc39ce1c4d8d2e99c945d9c644e78c93dd8964352226
SSDEEP

786432:Y4rVyDBH/hm5hDeSDAy3of1/RABxJgCokmB+MqZsFcBIx7Zf8FRM9NfJ6LSe/xJ5:/VCDf1/2OB+MqZE7ZL9NB6LNTbt

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Torrent Game\data1.exe
"C:\Users\Admin\AppData\Local\Temp\Torrent Game\data1.exe"
1⤵
PID:4396

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4396-8-0x0000000000400000-0x0000000000433000-memory.dmp

Filesize
204KB

Download