45a33915beee0ae687988d8c5b78c6e05ea897b9b1ff33bf569cb0fb89635cb4 | Triage

Analysis

max time kernel
118s
max time network
119s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
25/09/2024, 14:44

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

offerta DigitEd spa/RDO E-Learning_Offerta Economica2.p7m
Size

18KB
MD5

2e79b0497820f73d4b5d8ca9cdc098ee
SHA1

39d35a5d84627d3eb0a9feae945873c23ba036b5
SHA256

1479edb41fbe16d8fca101675361bf793304addd85451a739d30f6bb7ec130e4
SHA512

15ed76086234af258b38790f65f9c5af1ab90fbb1138a0ccf47eae22f8580550500a63ce6b58943cb66fb5ff22c7233fc4af15a80f7f147adcb1fd2fd7f5771e
SSDEEP

384:CrGzuhsCvuivAVle7uA2CVRG9C4ZCWFiwhU:CiMvfv88yA5W4WHu

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c "C:\Users\Admin\AppData\Local\Temp\offerta DigitEd spa\RDO E-Learning_Offerta Economica2.p7m"
1⤵
PID:2892

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2892-21-0x00000000002D0000-0x00000000002D1000-memory.dmp

Filesize
4KB

Download