58b7a04242e01e9c201cfa07059877ffb2d2264ef943b9b0309fed22ecb69176 | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 21:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

58b7a04242e01e9c201cfa07059877ffb2d2264ef943b9b0309fed22ecb69176.exe
Size

11.7MB
MD5

6ef3eb250a69d58e71b100088e2fb3d8
SHA1

1f4835d60027ae46220946992f3bcb0411345a77
SHA256

58b7a04242e01e9c201cfa07059877ffb2d2264ef943b9b0309fed22ecb69176
SHA512

0a66f40612de41d1d0c5ed5e4e7845da39115b637be181bec545e54fff3a48264d5e54f1bd0e4ff92c6ec5e606776cde75fd066a46be784935f60694fc1ed221
SSDEEP

196608:sUsbbFS6QTf05msl5lxmuOuV5M0cXd19XnvvyTvo0kODrem:xsb5S6QTsHlfxsuo0Od1Nnvvmem

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\58b7a04242e01e9c201cfa07059877ffb2d2264ef943b9b0309fed22ecb69176.exe
"C:\Users\Admin\AppData\Local\Temp\58b7a04242e01e9c201cfa07059877ffb2d2264ef943b9b0309fed22ecb69176.exe"
1⤵
PID:1116

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1116-54-0x0000000076031000-0x0000000076033000-memory.dmp

Filesize
8KB

Download