1a65d32d353149d5b310fc0ea603268baf85a66733870cc890d6558ac44a1107 | Triage

Analysis

max time kernel
77s
max time network
112s
platform
windows10_x64
resource
win10v20201028
submitted
19-03-2021 17:46

Sharing

Report Analysis Logs

General

Target

test.jpg.exe
Size

764KB
MD5

980a55049ad78b00f7a9cd35feccef70
SHA1

c550a9b12b02882ac068fce2f65f4e827c9ba1b8
SHA256

1a65d32d353149d5b310fc0ea603268baf85a66733870cc890d6558ac44a1107
SHA512

d3794e0d3108eba464236b5e9b19b3c0c472751c51ce7385425a888b00681788e85af2952190ac94e3bce80dd7f073f5d5eedc1db66683e72a4856ee8db13b98

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\test.jpg.exe
"C:\Users\Admin\AppData\Local\Temp\test.jpg.exe"
1⤵
PID:3884

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...