bfa6ef3651693338b02e21f975952b483988ce6e2e24e9bdf693cfb63d90afb1 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
10/07/2024, 11:05

Sharing

Report Analysis Logs

General

Target

$TEMP/instloffer.exe
Size

63KB
MD5

1445c451c599453855ed311c896e69e5
SHA1

c0109b8d8b8d9a350632685ca37fc9da49347c26
SHA256

586f16d9fc8fbd2ef0d3814492de1fd8e6c0be8f5861ce76ee08fc52fa1c867f
SHA512

4fb39f9541c0086e988e125e79a313629e51c1867d7d5aae89af2ee6de552e929b3e976bac19786aeca08971cc2a414080d33327176d29cddc11e9315a79baab
SSDEEP

1536:jJdZEszWriITJGrvopX1VF7CXjl7yFgPRSEvrGqEYiD:jqszWOITsEL50jl7yFg5SEvrGqEdD

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\$TEMP\instloffer.exe
"C:\Users\Admin\AppData\Local\Temp\$TEMP\instloffer.exe"
1⤵
PID:2632

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads