Analysis
- max time kernel
15s - max time network
113s - platform
windows10_x64 - resource
win10v20201028 - submitted
22/03/2021, 17:39
General
- Target 88F216EE25F70ED0704D8CC796ECD277.exe
- Size 74KB
- Sample210322-861bb2drk6
- SHA256 703d46e527cbce0c838146a5bb4d93593fb2942ae8dda6cd4d017c5de510549e
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\88F216EE25F70ED0704D8CC796ECD277.exe"C:\Users\Admin\AppData\Local\Temp\88F216EE25F70ED0704D8CC796ECD277.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4704-5-0x00000000022C1000-0x00000000022C3000-memory.dmp