3927e9bf483943765d06f52b5da3e3ec5fbc2ac7db70be5c863f38765427d8f6 | Triage

Analysis

max time kernel
92s
max time network
98s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
09-01-2025 12:38

Sharing

Report Analysis Logs

General

Target

toolSync_v1/agitator.asp
Size

947KB
MD5

f235ee7a69eb63d209526641e146fbfb
SHA1

a93ae672d8b21f0cac0652c5ed1b098ffa791b77
SHA256

bf2203ae2b727f3c4f63a46ab9d5beac1189de6b9d4db641b5965c1027596337
SHA512

56d851567016419274e93a35dce2c8d8807f07530e9248c9b3c30be5ee0fb5f39e935ccff653d16a360866f8b4aff59a07070dcf19202f59ad722a0f53e0c1de
SSDEEP

24576:WtWCnLLuj8zh1e5JDNz1neaisRwY4xIuFXrIjueaRe1gUnPFuQOOBpDMv6U:W0SLf9WzneaisRwY4WuVrjeaRSPcQOoE

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\toolSync_v1\agitator.asp
1⤵
PID:1900

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads