288492de5197a9fa987cb4bc2463a93c5653e07a8bb0dc1d6bb31d620a26ecc4 | Triage

Analysis

max time kernel
51s
max time network
56s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11/06/2024, 21:30

Sharing

Report Analysis Logs

General

Target

288492de5197a9fa987cb4bc2463a93c5653e07a8bb0dc1d6bb31d620a26ecc4.exe
Size

10.0MB
MD5

f8d0b4f23270eca43d14522f3f748799
SHA1

3c7aa797561d30cc37a2c38e6872b9d806c1d903
SHA256

288492de5197a9fa987cb4bc2463a93c5653e07a8bb0dc1d6bb31d620a26ecc4
SHA512

b55719e681d1b56dbfb14162bf2c514b7672dde367bb30ab48fc9c06982a585cc2cd88645ce4e6c172c5d0ff7554f69eee60f6b2527771c4beeef25355a32279
SSDEEP

196608:ckgAPGT4LF7JNvRCHUngaa4jLQXPY7I7uUDkhye1ZNc1EAGNbJvqNntH8dTP4:ckom3kaa4jiY0SXbNkbDntcdTP4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\288492de5197a9fa987cb4bc2463a93c5653e07a8bb0dc1d6bb31d620a26ecc4.exe
"C:\Users\Admin\AppData\Local\Temp\288492de5197a9fa987cb4bc2463a93c5653e07a8bb0dc1d6bb31d620a26ecc4.exe"
1⤵
PID:4304

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads