9ed5767db68fb669b3f18a0565cae471ee3800b94a187c4512e5a6691797c511 | Triage

Resubmissions

27-11-2024 20:39

241127-zfpdtszjes 6

27-11-2024 20:33

241127-zbwbksvqhl 6

25-11-2024 22:14

241125-15w1mswlcp 6

25-11-2024 20:57

241125-zryrmswke1 6

28-09-2024 18:21

240928-wzje5ssdlc 10

Analysis

max time kernel
92s
max time network
109s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20241023-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20241023-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
25-11-2024 22:14

Sharing

Report Analysis Logs

General

Target

resource.db
Size

52KB
MD5

4f65b8cb550d59fba5834981da06c7fe
SHA1

131633f01a736283ea057fd4f6a1f59df3152880
SHA256

eaea3e43ac1b3afea07a20b9f838194fc3a730ad88ef431ea243f00211a614cc
SHA512

32da2b87ff33f8815907f8bef6a55d2771d313d54732eb87276c1241742cd2e78bbbcbbacd1410ab4bee353670ee7170b67bd623d127eedb3302264fa02bc604
SSDEEP

384:nsc6mUFQgKJc3bNW8XokR4BX7QASX1QOx34eOxwUho/zgUAy3sChCf5UovADGYK4:s+UFVKJENW8XokReLoMxwgVaJUPo

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\resource.db
1⤵
PID:524

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads