56ca7595c42f7494949db48dd0ee28ca5e3aee86e0f558ef5756759fb11fef3b | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 05:44

Sharing

Report Analysis Logs

General

Target

56ca7595c42f7494949db48dd0ee28ca5e3aee86e0f558ef5756759fb11fef3b.exe
Size

2.0MB
MD5

0532f3c4e3b25213ace77c984944327a
SHA1

4da172d05d20220dd849b5347c0bd0ee211ab012
SHA256

56ca7595c42f7494949db48dd0ee28ca5e3aee86e0f558ef5756759fb11fef3b
SHA512

5a3ee24016a2f57b7de40f5a28521f1b3351328a15b0683358402e58552d5686ffef33782f45873602e105a633f2f5ac6c23c81bd5e5fc19016ee51085aaf32b
SSDEEP

49152:nvEVQQeoyzbaxPm5ehhfHAhFB6/SxtzEROg0AU5iO:nCcHaHFVaTwRObAU5n

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\56ca7595c42f7494949db48dd0ee28ca5e3aee86e0f558ef5756759fb11fef3b.exe
"C:\Users\Admin\AppData\Local\Temp\56ca7595c42f7494949db48dd0ee28ca5e3aee86e0f558ef5756759fb11fef3b.exe"
1⤵
PID:832

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/832-54-0x0000000075091000-0x0000000075093000-memory.dmp

Filesize
8KB

Download