Analysis
- max time kernel
121s - max time network
125s - platform
windows10_x64 - resource
win10-en-20211014 - submitted
22/11/2021, 15:19
General
- Target e715dcea8c5012a51a4a11c508e2c291.exe
- Size 16.6MB
- Sample211122-sp7hfaahb8
- SHA256 aeed6f465b742621bf145219db4ca122f2d9986cfc716b03e99afbcbe336a942
Score
7/10
Malware Config
Signatures
- Loads dropped DLL 4 IoCs
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e715dcea8c5012a51a4a11c508e2c291.exe"C:\Users\Admin\AppData\Local\Temp\e715dcea8c5012a51a4a11c508e2c291.exe"1⤵
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2716-118-0x00000000021E1000-0x00000000021E3000-memory.dmp