e720a79da177c4a054fc976b5edf287d9914cc0001c819b93e319f009ac905e2 | Triage

Analysis

max time kernel
140s
max time network
51s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
20/06/2024, 09:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

902.exe
Size

3.3MB
MD5

6d46dde79db4a4cb3a6e3d143d1aed52
SHA1

ae78937cf3c5c4631aba5d4e954ebbd869f5c65a
SHA256

4624af2479646d42d6b5d635780574adbc9db91925831ece6437d28132ff92eb
SHA512

389e09b87b7c949ec9ade586708d61a6636c183a59e3c59b548b287c9e8ff8162d249dc2817f0decab280b850aa9ce0c42c45d4b58fb3ee21340ce5294f36d1d
SSDEEP

49152:Gl+h+1qs0Y/BTmkuGjHnevq6OcGJgseuHld2QGj:GlK+19VNrjHnee6mldZGj

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\902.exe
"C:\Users\Admin\AppData\Local\Temp\902.exe"
1⤵
PID:2644

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2644-0-0x00000000007D0000-0x00000000007D1000-memory.dmp

Filesize
4KB

Download
memory/2644-1-0x0000000000400000-0x0000000000640000-memory.dmp

Filesize
2.2MB

Download
memory/2644-2-0x0000000000400000-0x0000000000640000-memory.dmp

Filesize
2.2MB

Download
memory/2644-3-0x00000000007D0000-0x00000000007D1000-memory.dmp

Filesize
4KB

Download