f49c5316c54f6bd9f3dfd01032166639054768b9e8d52bf9a47da4267669d53a | Triage

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
01/05/2024, 11:15

Sharing

Report Analysis Logs

General

Target

f49c5316c54f6bd9f3dfd01032166639054768b9e8d52bf9a47da4267669d53a.exe
Size

10.0MB
MD5

41cc95eb05b9fb40ed6d928072c75b30
SHA1

80e30c18e55095312336b62019737ffb1e952cd2
SHA256

f49c5316c54f6bd9f3dfd01032166639054768b9e8d52bf9a47da4267669d53a
SHA512

a0285d9b47c2544836b40ca493e5c50de60cedb1b17b78e0e0221339fd2f1c50731eaf7467e7c39d06c15e5496d60c4f112925f9aa9144a6eb3a23f2e4195d3f
SSDEEP

196608:HjOltJJujpfUGkOHNzGwn8pJzzD3wSD6OAkvGbywqwdmzDSXmm9s7Me5laMlTaRG:HjOPJJuNfUcHNYqcyywqwYPSXF9HWlas

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\f49c5316c54f6bd9f3dfd01032166639054768b9e8d52bf9a47da4267669d53a.exe
"C:\Users\Admin\AppData\Local\Temp\f49c5316c54f6bd9f3dfd01032166639054768b9e8d52bf9a47da4267669d53a.exe"
1⤵
PID:2304

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads