Analysis
- max time kernel
136s - max time network
139s - platform
windows7_x64 - resource
win7-en-20210920 - submitted
03/10/2021, 07:37
General
- Target 5a36ca054903b13eccebd9476e4f59c8.exe
- Size 230KB
- Sample211003-jft2bafba3
- SHA256 5b9c3634412b0c729160d9f275c2ad8b1b26a2ab8b5053803445bbf48256d44c
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5a36ca054903b13eccebd9476e4f59c8.exe"C:\Users\Admin\AppData\Local\Temp\5a36ca054903b13eccebd9476e4f59c8.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1740-53-0x00000000765A1000-0x00000000765A3000-memory.dmp