77b4650847cb0c0389bcbe8feda2807d42d3f59cdd3f2b0b07f8dcc04e904fa4 | Triage

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220414-en
submitted
27-05-2022 20:21

Sharing

Report Analysis Logs

General

Target

APT-Hunter-master/Tools/HCTOOLS/source/bodyfile.pl
Size

1KB
MD5

eee053f46334760a82b534435a18c0e8
SHA1

18bab15934c82e0586dcc43b2ad56d8125dbe2fc
SHA256

eacd4be4075178627202dcb12c28232bc47a2dbc37213ce10c29853f5e503366
SHA512

0dab8d77a07b2cb2bb6c9cd3cd15ecf299025359e0f23028138bcd7802aceb57642d00b9461e36016d5372058ebc77b1a6c1793ab3f038fc19369f40c19f8285

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\APT-Hunter-master\Tools\HCTOOLS\source\bodyfile.pl
1⤵
PID:2116

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
PID:1904

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...