6663ff536e707a57681d585f35903f6164baa543667411e89050add532240bb1 | Triage

Analysis

max time kernel
122s
max time network
126s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/09/2024, 19:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

鼠标指针/cross.ani
Size

17KB
MD5

41ed4291e51a3d08d7cb4b51e4232d61
SHA1

dc068fb449ed62a0227c9ca6b42ee7d3ac941044
SHA256

e6cc06e44c9ea364941b52385f914c3d994720f7d550d5dff7d8559750a8fd28
SHA512

37827b7756776849fd67f242b7b517572e54d86076e17de0c18c4fb3a9bac46880271e4a11d31fba46ddb5e2acb68ef761057c43c8aa5bef77aae7ecf888f3d8
SSDEEP

12:AAMoQ2+yFFFFFFFFFLH7iu73FFFFFFFFFuaardA2+yFFFFFFFFFLH7iu73FFFFFV:koNEHRr3EHRr3OOEHRr3EHRr3OP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\鼠标指针\cross.ani
1⤵
PID:2656

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2656-21-0x0000000001FD0000-0x0000000001FD1000-memory.dmp

Filesize
4KB

Download