55a08e78689b58ba3b4bf7ea6d3a2420b15ccd7b4fccc97892b5724c538fb6c8 | Triage

Analysis

max time kernel
153s
max time network
184s
platform
windows7_x64
resource
win7-en-20211208
submitted
30-01-2022 14:50

Sharing

Report Analysis Logs

General

Target

55a08e78689b58ba3b4bf7ea6d3a2420b15ccd7b4fccc97892b5724c538fb6c8.exe
Size

9.6MB
MD5

ceb69fedc35c20a77697dd877e044ac2
SHA1

2ad07b015a5cd0e0ba16b1d44393497b47106832
SHA256

55a08e78689b58ba3b4bf7ea6d3a2420b15ccd7b4fccc97892b5724c538fb6c8
SHA512

239764e8ff79163daec8be4540dda7ed247861f224ae94f9f8f0adc5ccb0d3791ed26cf9e7aedcd4fd5c53bd61fef1a9a4d5cc5f0f90663fbbf8a7f40a5774dd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\55a08e78689b58ba3b4bf7ea6d3a2420b15ccd7b4fccc97892b5724c538fb6c8.exe
"C:\Users\Admin\AppData\Local\Temp\55a08e78689b58ba3b4bf7ea6d3a2420b15ccd7b4fccc97892b5724c538fb6c8.exe"
1⤵
PID:1844

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1844-54-0x0000000075341000-0x0000000075343000-memory.dmp

Filesize
8KB

Download
memory/1844-55-0x00000000029D0000-0x00000000029D1000-memory.dmp

Filesize
4KB

Download