aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b

Analysis

max time kernel
100s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/10/2022, 19:01

Target
aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b.exe
Size 156KB
Sample221001-xpe6eacedp
SHA256 aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b
MD5 53dbcca847822a787cba0fece8650ddc
SHA1 d27b15af02f6b1445c631c0158fafb76a5f91545
SHA512 a6a1a92eeeb802d42901547ed5e118d7946a9df40af6c0662f0ddf37e9d16a7915b18cea50bb1b349cabf19b1ba4d299e6bc38f5f8a44e2c4457511be1ac629d
SSDEEP 3072:54eYZ4+1JXJJrVd1nut+uV2mTVDjFwkWl176jZ1hCagdQvP/1AHqA1sn:i5O8vVdRQ/vqkg1gEagdQHABSn
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Loads dropped DLL 1 IoCs

pid	Process
1684	aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b.exe
"C:\Users\Admin\AppData\Local\Temp\aa88b1a8a31d9849f66f44e19bd47fb9ed1bd205d7a6975609fc6529cb793f6b.exe"
1⤵
- Loads dropped DLL
PID:1684

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsp6B8.tmp\System.dll
Size 11KB
SHA256 dc4da2ccadb11099076926b02764b2b44ad8f97cd32337421a4cc21a3f5448f3
MD5 00a0194c20ee912257df53bfe258ee4a
SHA1 d7b4e319bc5119024690dc8230b9cc919b1b86b2
SHA512 3b38a2c17996c3b77ebf7b858a6c37415615e756792132878d8eddbd13cb06710b7da0e8b58104768f8e475fc93e8b44b3b1ab6f70ddf52edee111aaf5ef5667
SSDEEP 192:7DKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF:7ViJrtFRdbmXK8+PCw
MD5 SHA1 SHA512 SSDEEP

Submit Download