1173af60b8b0b350632ded58fd89429fd9457840f418ffa214f57487768ab19a | Triage

Analysis

max time kernel
92s
max time network
203s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
12/10/2024, 00:44 UTC

Sharing

Report Analysis Logs

General

Target

loop.cur
Size

326B
MD5

9349e388af9859b16842b1eec9095142
SHA1

e7e9def1988bda00d8be38b1c16bc1cc37312ec0
SHA256

f048f4cfa8c2d895524358f77a0cae5ee3db15ee86a6a118cae37527ab460979
SHA512

fa53cff0170fe287ea61c9bf689b9b28c58ed63bb32bcc82db668b40952d53cc67f4fd14ceec66c32f342440061456e363e79fa847b15f42449b4519b7bd230d

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\loop.cur
1⤵
PID:788

Network

DNS

48.229.111.52.in-addr.arpa

Remote address:

8.8.8.8:53

Request

48.229.111.52.in-addr.arpa

IN PTR

Response

No results found

8.8.8.8:53

48.229.111.52.in-addr.arpa

dns

72 B
158 B
1
1

DNS Request

48.229.111.52.in-addr.arpa

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads