2c13447326df9da1edb4700336d4cf841f7575b7505df68ef2ae7bdb6f2d9f5c | Triage™

Analysis

max time kernel
34s
max time network
82s
platform
windows10-2004_x64
resource
win10v2004-en-20220113
submitted
06/02/2022, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
c754e46f97def1e03a574662d827d0d2.exe
Size 423KB
Sample220206-tk8elsbee2
SHA256 2c13447326df9da1edb4700336d4cf841f7575b7505df68ef2ae7bdb6f2d9f5c
MD5 c754e46f97def1e03a574662d827d0d2
SHA1 bbb6bd54867a9e3ee53521c8bc538aca3c65588d
SHA512 f8f60902cda8dd150b19cd1ef6972b9a943c468736c4be320d343205f06629b26e9712a3981aae8c85cf64af515e1044ecf1f386071aa4bd9aded6c3f0c57d91
MD5 SHA1 SHA512

Score

7^/10

Malware Config

Signatures

Loads dropped DLL 1 IoCs

pid	Process
2664	c754e46f97def1e03a574662d827d0d2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c754e46f97def1e03a574662d827d0d2.exe
"C:\Users\Admin\AppData\Local\Temp\c754e46f97def1e03a574662d827d0d2.exe"
1⤵
- Loads dropped DLL
PID:2664

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads