3cb33bc1ed5791cadfb6a99096979b8690de39f4a10b09478ac52beb8496d07b | Triage

Analysis

max time kernel
43s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/10/2022, 22:52

Sharing

Report Analysis Logs

General

Target

3cb33bc1ed5791cadfb6a99096979b8690de39f4a10b09478ac52beb8496d07b.exe
Size

678KB
MD5

6d7fac44ec6d745c9ebec53e71cb3e10
SHA1

58ca7590b82d187f35f5089c94d1a6566b45f7ce
SHA256

3cb33bc1ed5791cadfb6a99096979b8690de39f4a10b09478ac52beb8496d07b
SHA512

b6841009a9c3a935d6d60559b18df59754f0978032cd90674addeade52d2ec1764d04c3e577d78be7a94387bf2abea35d7214818ae3bd3b485a49fb067c14b33
SSDEEP

12288:R/lSBiK7oybsKvWByrrAZIwAVzb3TglAXPF3KfSOFCCMp/09rGO0yc2e3z8pYcQ/:R/RK7JfvWBycITVzbV/F3F+MpMNlS5cW

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3cb33bc1ed5791cadfb6a99096979b8690de39f4a10b09478ac52beb8496d07b.exe
"C:\Users\Admin\AppData\Local\Temp\3cb33bc1ed5791cadfb6a99096979b8690de39f4a10b09478ac52beb8496d07b.exe"
1⤵
PID:1948

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1948-54-0x00000000764D1000-0x00000000764D3000-memory.dmp

Filesize
8KB

Download