0698cc3aa985c9128da46a60766c7fd8d0a1b29285876a1fd9645493039d25df

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/09/2024, 05:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

PingMe.exe
Size

7KB
MD5

991cd458830ae2008be0c2d8e26c8bd0
SHA1

d519a7ffd8360a47450e60b7d665e666d9df89bc
SHA256

f2ecda9fb1b201d9a120c5906c6b0983205e4858ecea0065499841cf4047eb71
SHA512

e45ce313823e43726418378920c367a4957b2806ee8070d0f4acf63fd1fa893577fbe91fc859c81bd8d6984ca1c0fe9ef0b32200c79106a3f7dcff0b8efdb4aa
SSDEEP

96:GL1h5Q/B2JL1L5Ie79CCna2fLAyrLSc9Q0btWcmRXzNt:GRQ/EL1L5Ie9V5LAySc9Q0bw5RB

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 1 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2232	PingMe.exe

C:\Users\Admin\AppData\Local\Temp\PingMe.exe
"C:\Users\Admin\AppData\Local\Temp\PingMe.exe"
1⤵
- System Network Configuration Discovery: Internet Connection Discovery
PID:2232

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2232-0-0x000007FEF5D2E000-0x000007FEF5D2F000-memory.dmp

Filesize
4KB

Download
memory/2232-1-0x000007FEF5A70000-0x000007FEF640D000-memory.dmp

Filesize
9.6MB

Download
memory/2232-2-0x000007FEF5A70000-0x000007FEF640D000-memory.dmp

Filesize
9.6MB

Download