36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba | Triage

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 05:54

Sharing

Report Analysis Logs

General

Target

36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe
Size

904KB
MD5

77fb108746bad0e36112a7c8f3ea7e0b
SHA1

edd010e27b541bef2e82be2b0e6e7f9067606e58
SHA256

36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba
SHA512

2aac056fc170850cbeb53000a0f3d2c45fc46eac68f1fc8fc6e7437f0e66ecfaf831fb536063980fabb75654d43e757adb1d384f482a66dd6c48c02028bdbb1f
SSDEEP

24576:qKgG+T4UljQCQJMIeYliGnsLXXFfeSsib:BgNECQ2IegpnMFepM

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe
"C:\Users\Admin\AppData\Local\Temp\36ce9619a8af4024f149e55a5472f674cf8274ad90c6c770a009891ec0abfcba.exe"
1⤵
PID:1356

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1356-54-0x0000000075BA1000-0x0000000075BA3000-memory.dmp

Filesize
8KB

Download