594fc6920eaa06364ff7ffeb87be15ec81882030749759a872a6b9f17da75670

Resubmissions

21/05/2024, 14:43

240521-r3mvhshd83 3

21/05/2024, 14:40

21/05/2024, 14:37

21/05/2024, 14:34

21/05/2024, 14:31

Analysis

max time kernel
14s
max time network
16s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
21/05/2024, 14:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Some Problems/Copy of clientlibs(4).css
Size

17KB
MD5

5600fee2df4426d31992e5e250dab205
SHA1

221366f85243d5d2a60bc54cfc17e3a44f7f2340
SHA256

4ea83737e59ab061210a8c3bfa7a3e00229ea6c8152e3d8044cdad62aba971dd
SHA512

8ad2e38d4dac9ec9ebdc619ad815331f9c7687332f6930cbebe63176b5e4721c354b660ab0663ac0a29d38411ecc9e47231ae7211f24c4ad9729ac1297cefb4a
SSDEEP

192:U2sWQz0WdHGaO5EZ/EaaO5EP/EOZHc8fonc1VKAZruvHhfmKA0RikfV+ApfdW4a:4zNygh0ghba

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 3056 wrote to memory of 2568	3056	cmd.exe	29
PID 3056 wrote to memory of 2568	3056	cmd.exe	29
PID 3056 wrote to memory of 2568	3056	cmd.exe	29

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\Some Problems\Copy of clientlibs(4).css"
1⤵
- Suspicious use of WriteProcessMemory
PID:3056
- C:\Windows\system32\NOTEPAD.EXE
  "C:\Windows\system32\NOTEPAD.EXE" C:\Users\Admin\AppData\Local\Temp\Some Problems\Copy of clientlibs(4).css
  2⤵
  PID:2568

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads