b1a2a1105356238b017ec1139552c3907ab62811a41b9d9e2a74cf940360eada | Triage

Analysis

max time kernel
15s
max time network
19s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
27/07/2024, 23:17

Sharing

Report Analysis Logs

General

Target

15ff10a973f1433029f2204f3ccaee60N.exe
Size

4KB
MD5

15ff10a973f1433029f2204f3ccaee60
SHA1

c9aaf910ede6069519cc135d8d55d40cf1ee76d6
SHA256

b1a2a1105356238b017ec1139552c3907ab62811a41b9d9e2a74cf940360eada
SHA512

97961f4b7e224353bc88621d7525b334a64e3546865c075ccb7b101fdbe472f86b655dae6cad983673c1d3a0736a1792768097d3fe6f102dba811fa3fe8d9d10
SSDEEP

48:6iInx/Pt7u8B8ub65FJzncV4MKe2D2d9AvqBH6uulhfV5gqXSfbNtm:5qhPZeFcVx92vkk7VyzNt

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\15ff10a973f1433029f2204f3ccaee60N.exe
"C:\Users\Admin\AppData\Local\Temp\15ff10a973f1433029f2204f3ccaee60N.exe"
1⤵
PID:2400

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2400-0-0x000007FEF5463000-0x000007FEF5464000-memory.dmp

Filesize
4KB

Download
memory/2400-1-0x0000000000A20000-0x0000000000A28000-memory.dmp

Filesize
32KB

Download
memory/2400-2-0x000007FEF5460000-0x000007FEF5E4C000-memory.dmp

Filesize
9.9MB

Download