c2efcc35f677ce07b7266872daf0b4184f9f6085e3d5605200b030e879939b9b | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
15/07/2024, 01:48

Sharing

Report Analysis Logs

General

Target

5bfdfb96a095b8be3a98a374c5332380N.exe
Size

12KB
MD5

5bfdfb96a095b8be3a98a374c5332380
SHA1

a6d2d8770a4c320b5b4c207574a630aa09bdae38
SHA256

c2efcc35f677ce07b7266872daf0b4184f9f6085e3d5605200b030e879939b9b
SHA512

05d7cf3b9e22bdb121bdf044fda3d435f2f3256527da3d5def78e399751ba80cff3d0ac720d4e3fae2ce6c4dc2962f0d2bf834b127dcba37c25e18a0846c79f4
SSDEEP

192:9cLK4i0mvCtVKnlYJLdLTT1nPl0rDTs+842Ei9:9cLK4mMNxLTj0rDTs+8RE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5bfdfb96a095b8be3a98a374c5332380N.exe
"C:\Users\Admin\AppData\Local\Temp\5bfdfb96a095b8be3a98a374c5332380N.exe"
1⤵
PID:2680

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2680-0-0x0000000074711000-0x0000000074712000-memory.dmp

Filesize
4KB

Download
memory/2680-1-0x0000000074710000-0x0000000074CBB000-memory.dmp

Filesize
5.7MB

Download
memory/2680-2-0x0000000074710000-0x0000000074CBB000-memory.dmp

Filesize
5.7MB

Download
memory/2680-3-0x0000000074710000-0x0000000074CBB000-memory.dmp

Filesize
5.7MB

Download