Analysis
- max time kernel
18s - max time network
111s - platform
windows10_x64 - resource
win10v20201028 - submitted
22/03/2021, 17:40
General
- Target ab01d983a5602b89f5b2155ebaa2c2c4.exe
- Size 75KB
- Sample210322-d1bhk7tscx
- SHA256 beec083384c875dc9a96b63e842e896db746b6ae8ab290ade82a585a30faec61
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 3 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab01d983a5602b89f5b2155ebaa2c2c4.exe"C:\Users\Admin\AppData\Local\Temp\ab01d983a5602b89f5b2155ebaa2c2c4.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3620-5-0x0000000002951000-0x0000000002953000-memory.dmp