b4b96e61980599af727294cc05e85675e789f872b5c42346096f422c118de084 | Triage

Resubmissions

21/05/2024, 00:50

240521-a7ax3sdb7s 4

21/05/2024, 00:49

240521-a6nsjsdb5s 1

Analysis

max time kernel
605s
max time network
1590s
platform
windows10-1703_x64
resource
win10-20240404-en
resource tags

arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system
submitted
21/05/2024, 00:50

Sharing

Report Analysis Logs

General

Target

pagefile.sys
Size

1023.0MB
MD5

81a78c15824391a9d2dd3d4f0db1b865
SHA1

0140dffdf17154d948578ab3a7ae71253721bb62
SHA256

0a83304297fc70cc6a030279e46638c68fa0bdc8c9e426b28b9b60cb6ebbcb15
SHA512

5c824b5995481779de259eb0e3018cde64309a73ac6a1e8276b579ea50d40ea37ea4557c3ecaedd079d29e40b8310a032eddc88e7a2bba5672f78a51065645dc
SSDEEP

3145728:OVfFCrc6qgPT2rp1daFoZk2Fjtl2QRDprQv:OfmfPWp1cuyIlfRDprQ

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\pagefile.sys
1⤵
PID:732

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads