82e560a078cd7bb4472d5af832a04c4bc8f1001bac97b1574efe9863d3f66550 | Triage

Resubmissions

21-02-2024 19:59

240221-yqmsbafb69 10

27-02-2023 15:10

230227-sj843seb89 1

27-06-2021 20:55

210627-2nsmat5hex 10

Analysis

max time kernel
23s
max time network
77s
platform
windows10_x64
resource
win10v20210408
submitted
27-06-2021 20:55

Sharing

Report Analysis Logs

General

Target

d_win.bin.exe
Size

68KB
MD5

ca8dcb4c02f5b3b09b0bc49452f05bd6
SHA1

0e0001da7e198da8e3e82252d5414dbcb8bee9d1
SHA256

eb22f22fedb24ef3d06d2ba6ac9bc53528f8d1e489fefeac9501b926a0be6097
SHA512

9221c98a0ad3179725fd66de3fcfbc0f97af300431d82645ee0b9d8e16a756b7881a91f661a569156bf0d5984e54703d513d753329bffd382327cc7a194ffc48

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d_win.bin.exe
"C:\Users\Admin\AppData\Local\Temp\d_win.bin.exe"
1⤵
PID:808

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads