06678bbf954f0bece61062633dc63a52a34a6f3c27ac7108f28c0f0d26bb22a7 | Triage

Analysis

max time kernel
1560s
max time network
1561s
platform
windows7_x64
resource
win7-20241010-en
resource tags

arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
submitted
08-12-2024 16:08

Sharing

Report Analysis Logs

General

Target

aero_arrow.cur
Size

133KB
MD5

9024a1e60a7fa3191b7945f98457dece
SHA1

fb9975412bf0bb5ad60f62985c08089ce0a11a1d
SHA256

06678bbf954f0bece61062633dc63a52a34a6f3c27ac7108f28c0f0d26bb22a7
SHA512

93cae482836b4b642204a73cfbaa0ba004ac8ea944cac50a59531ab8f537cfddc82ba57d13a65d5cb5c2add2f2bbd1d4684ba9ca70811e0a88c2949dde554280
SSDEEP

96:SBwU7YDJxO3ngQ/zjW1HXVly6KG3HeyJhkkkkkkwW/pJ6jlK:8wSO+ngQ/zjW1XVlPhH/PX6ZK

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\aero_arrow.cur
1⤵
PID:2876

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2876-21-0x00000000003D0000-0x00000000003D1000-memory.dmp

Filesize
4KB

Download