5254dfd09d8e87ad20fb771a92ea92134ec060fcd2884334a291e8c1f2aebbfd | Triage

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
02/10/2022, 20:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

5254dfd09d8e87ad20fb771a92ea92134ec060fcd2884334a291e8c1f2aebbfd.exe
Size

13.0MB
MD5

1413f927dd77cc3b176bda6507d38bb1
SHA1

4580ea9157228c03d495ad36d22a662639706fed
SHA256

5254dfd09d8e87ad20fb771a92ea92134ec060fcd2884334a291e8c1f2aebbfd
SHA512

0c5473b563de84984d17ef60dde602dccae3bf4638af24af864f2e0032f83085d8c6c9a22161c13a0737d12cf42d6233cc3e0106d703b2478b2cb26f28e2a158
SSDEEP

393216:HfyU1EjJOnTxSmoeSrpoTsLxf3vqKf1lO77zNuLYwF7aztW/:H6FOntJfQpoYlf3vqKf1lszNCYwczg/

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5254dfd09d8e87ad20fb771a92ea92134ec060fcd2884334a291e8c1f2aebbfd.exe
"C:\Users\Admin\AppData\Local\Temp\5254dfd09d8e87ad20fb771a92ea92134ec060fcd2884334a291e8c1f2aebbfd.exe"
1⤵
PID:1468

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1468-54-0x0000000076BA1000-0x0000000076BA3000-memory.dmp

Filesize
8KB

Download