4e51c17cdfbfe8e337396526404abe040f53199fc316e25b4b5bd1ced1fb836f | Triage

Analysis

max time kernel
39s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 13:34

Sharing

Report Analysis Logs

General

Target

4e51c17cdfbfe8e337396526404abe040f53199fc316e25b4b5bd1ced1fb836f.exe
Size

517KB
MD5

6d5abcb84535a00b9eda69d027896be0
SHA1

560ee58bf1c4cdcae7f74dd033bd082cbc5968b3
SHA256

4e51c17cdfbfe8e337396526404abe040f53199fc316e25b4b5bd1ced1fb836f
SHA512

a22e3ad5f336c611370e33eed9416c774eed6f92c23137cf462481a94b56f482ecfcb3ac4c2d97c3eb78add2dbda10d64b82733edf92d9a33857d5e12b1ba6db
SSDEEP

12288:FQAyWsQf7Q7/2buHF2I7QhQKusEigCNQ87MDHDb1OJlP:XRsQf7Q74eLEhQKu1i5NLqDYXP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\4e51c17cdfbfe8e337396526404abe040f53199fc316e25b4b5bd1ced1fb836f.exe
"C:\Users\Admin\AppData\Local\Temp\4e51c17cdfbfe8e337396526404abe040f53199fc316e25b4b5bd1ced1fb836f.exe"
1⤵
PID:1504

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1504-54-0x00000000768A1000-0x00000000768A3000-memory.dmp

Filesize
8KB

Download