6663ff536e707a57681d585f35903f6164baa543667411e89050add532240bb1 | Triage

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
04/09/2024, 19:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

鼠标指针/dgn1.ani
Size

17KB
MD5

b15182c13b4f1cb8cfb22c79323c10a1
SHA1

22416f5a95ae7d39f4e2dce0f5f3f482545ebe1d
SHA256

5dfefd051893e77e4815935059b70e8c8024d8ab7e4eef9634a8cf04ce2aed7e
SHA512

76e10bb583431540a1330efc3d9051d33836203e40b030196f83acb40ba149e522769d528943cbc6f4051670734c2913c04307fdcc79659759f467a888126cb8
SSDEEP

24:koNcWngEduwvcWngEduwvcO0gcizSlwvcO0gcizSlwvcWngEduwvcWngEduwvcoy:kobgzegzWZalGZalOgzegzwPnYPnT

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\鼠标指针\dgn1.ani
1⤵
PID:1796

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1796-21-0x0000000002530000-0x0000000002531000-memory.dmp

Filesize
4KB

Download