2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc | Triage

Analysis

max time kernel
121s
max time network
121s
platform
windows7_x64
resource
win7-en-20211104
submitted
17-11-2021 12:24

Sharing

Report Analysis Logs

General

Target

2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc.exe.000.exe
Size

609KB
MD5

4a77c0a4701c751144d2d6161935f7f7
SHA1

77d4d5e42d37c5389fc74bb0dfcf9d5b35a6dce2
SHA256

2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc
SHA512

7c8bdf7ab59e0d5b22b445d239b7ecebaabaeaaadb879653589bdc0dd8a4918a0bc3ad69ff2b88ebb19d56850b4561d51c5f3825848c42f27318437373a14d81

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc.exe.000.exe
"C:\Users\Admin\AppData\Local\Temp\2de0849e81686ef91ab4dfca1c589247c7d8edb937051b2dd3d4b9f16c8cb3fc.exe.000.exe"
1⤵
PID:764

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/764-55-0x0000000074E51000-0x0000000074E53000-memory.dmp

Filesize
8KB

Download