2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b | Triage

Analysis

max time kernel
36s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 06:17

Sharing

Report Analysis Logs

General

Target

2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe
Size

548KB
MD5

706db3cc08664453d03ad47973b64d39
SHA1

5a7c51c93f00ecf716b7bc88d7e06d57ca131f4c
SHA256

2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b
SHA512

4147437c66680a6a8b1390eed487fe1e85ac110112582fba4b397a305fdf9c43faf53c8d83a5c0d514db13acf6dfdad82eac820ab4b8889a545bc4af856b3333
SSDEEP

12288:pWf213EgbX2z0rGQg+vQlZZhPQIxVTFm2eDf/ElB7R:pRbFGQgplZZtQI3E2eO9

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe
"C:\Users\Admin\AppData\Local\Temp\2eb3f53de9c64699132a986e512c1df8652ee253a9d037e0fb9f2a57d126355b.exe"
1⤵
PID:2000

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2000-54-0x00000000754E1000-0x00000000754E3000-memory.dmp

Filesize
8KB

Download