07a5b928cbeba40cf57115b218a6de10e01d4bf4b5a0428e13fad5e245795276 | Triage

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 21:28

Sharing

Report Analysis Logs

General

Target

07a5b928cbeba40cf57115b218a6de10e01d4bf4b5a0428e13fad5e245795276.exe
Size

15.4MB
MD5

8687cd13afa3d84c34d40ad172f4a8d2
SHA1

ccc7136e54b3e4297ba0a3475502cd11a43aae23
SHA256

07a5b928cbeba40cf57115b218a6de10e01d4bf4b5a0428e13fad5e245795276
SHA512

6a0f0ca596275dc15f91c210078c50293590f6bd269d82366aff9f6b151f3e69738dee2e2e04157d88d3971177080d69f58b2b53738ed846c7694ee5affbed80
SSDEEP

393216:xsb5S6QTsHlfxsuo0Od1NnvvmewZ3UpVe6Hl1C:xs1tF981WdUvnF1C

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\07a5b928cbeba40cf57115b218a6de10e01d4bf4b5a0428e13fad5e245795276.exe
"C:\Users\Admin\AppData\Local\Temp\07a5b928cbeba40cf57115b218a6de10e01d4bf4b5a0428e13fad5e245795276.exe"
1⤵
PID:1988

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1988-54-0x0000000075911000-0x0000000075913000-memory.dmp

Filesize
8KB

Download