259d822c19610ed0e85353668e7077268dc0a6aa79eb309305a841aa3a795146 | Triage

Analysis

max time kernel
118s
max time network
120s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
05/07/2024, 11:48

Sharing

Report Analysis Logs

General

Target

259d822c19610ed0e85353668e7077268dc0a6aa79eb309305a841aa3a795146.exe
Size

11KB
MD5

9abafb1db0f90a7919d9d583d79898d1
SHA1

5d0554df1bbe6d3cf38ab2ba522bb631e9624b23
SHA256

259d822c19610ed0e85353668e7077268dc0a6aa79eb309305a841aa3a795146
SHA512

aacd89f0f5112fe2bd555ccc90464e0da1f15757e87214a56523177d20fa8dbb86d388a5d6057169dba9f7cf87a98779b2cb79af38c36bc84f119a0d00af9c83
SSDEEP

192:ICh639ZSWSPmVFnlYJLLLTTMnPYqSFTh:ICh63SPmkPLTrqSFTh

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\259d822c19610ed0e85353668e7077268dc0a6aa79eb309305a841aa3a795146.exe
"C:\Users\Admin\AppData\Local\Temp\259d822c19610ed0e85353668e7077268dc0a6aa79eb309305a841aa3a795146.exe"
1⤵
PID:2020

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x000007FEF567E000-0x000007FEF567F000-memory.dmp

Filesize
4KB

Download
memory/2020-1-0x000007FEF53C0000-0x000007FEF5D5D000-memory.dmp

Filesize
9.6MB

Download