4f31814ad57753ebc5ae6d0e941d23a3830c961b4eee5aa3eb554ec2606d3d51 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
30/09/2022, 21:26

Sharing

Report Analysis Logs

General

Target

4f31814ad57753ebc5ae6d0e941d23a3830c961b4eee5aa3eb554ec2606d3d51.exe
Size

515KB
MD5

ac99d779dc108c815ed502794fe2ebb2
SHA1

b97d214eda9ca8fa98ab1599d3a58fa53f2e2ca5
SHA256

4f31814ad57753ebc5ae6d0e941d23a3830c961b4eee5aa3eb554ec2606d3d51
SHA512

2ba6665ed79c3d19d62d4ea19f6022b07bde5b88d6a5c0072ccabd666d3552ec7d79c7b28c51e74659f9c8c7fb2cbfa8cb629d55f15074201c12df037997744e
SSDEEP

12288:cJ9dKfQ1yCtBYd1eHxVF5HcZ6LnmsHaeIld/DARe4yWIP:K9dKfQ1hBYaHxlcZarHaXlxDke4MP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\4f31814ad57753ebc5ae6d0e941d23a3830c961b4eee5aa3eb554ec2606d3d51.exe
"C:\Users\Admin\AppData\Local\Temp\4f31814ad57753ebc5ae6d0e941d23a3830c961b4eee5aa3eb554ec2606d3d51.exe"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2024-54-0x0000000075F81000-0x0000000075F83000-memory.dmp

Filesize
8KB

Download