Analysis
-
max time kernel
36s -
max time network
47s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
12/07/2022, 06:06
General
-
Target
4c75f7de452cf66eddd2bd2313419f95b43704677b1b9ab21b809e80b38fd018.exe
-
Size
3.3MB
-
MD5
1e5f31698185dea0d7a4a97b985b1114
-
SHA1
e32a470e099d433abaac3f61c096b9d3e0efcef6
-
SHA256
4c75f7de452cf66eddd2bd2313419f95b43704677b1b9ab21b809e80b38fd018
-
SHA512
f64dfb4c6f1acb2ff7318c2b16f026c8fdd67a05f450356c979c795c0fa86272b5b292944ba18eefc57c5ece52422f03e076d58d56b27d59c539c9ff114b2815
Score
6/10
Malware Config
Signatures
-
Enumerates connected drives 3 TTPs 22 IoCs
Attempts to read the root path of hard drives other than the default C: drive.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4c75f7de452cf66eddd2bd2313419f95b43704677b1b9ab21b809e80b38fd018.exe"C:\Users\Admin\AppData\Local\Temp\4c75f7de452cf66eddd2bd2313419f95b43704677b1b9ab21b809e80b38fd018.exe"1⤵
- Enumerates connected drives
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
8KB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
1.5MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
6.2MB
-
Filesize
64KB
-
Filesize
6.2MB
-
Filesize
64KB
-
Filesize
1.1MB