1e5153d9cc2eed9f641fee478c9a8d1da97d201f7510cf1d6e02d633d1368b46 | Triage

Analysis

max time kernel
184s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03/10/2022, 15:41

Sharing

Report Analysis Logs

General

Target

1e5153d9cc2eed9f641fee478c9a8d1da97d201f7510cf1d6e02d633d1368b46.exe
Size

77KB
MD5

6a36ad99db7aea25dfd7445d5edd7b5e
SHA1

eae7b6a8a30dcc65990073142153405c7cbdcea3
SHA256

1e5153d9cc2eed9f641fee478c9a8d1da97d201f7510cf1d6e02d633d1368b46
SHA512

57321aa414e2d74c641f69c8d9dfbd741f0885a867b452afbd7fd18e0eb706a3693ea0c129586d16946aeba1d77f6cec739f3a29e55d1a0fea90dd556fe8f49f
SSDEEP

1536:NpgpHzb9dZVX9fHMvG0D3XJFfilhYisKldl:fgXdZt9P6D3XJ8lh95

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1e5153d9cc2eed9f641fee478c9a8d1da97d201f7510cf1d6e02d633d1368b46.exe
"C:\Users\Admin\AppData\Local\Temp\1e5153d9cc2eed9f641fee478c9a8d1da97d201f7510cf1d6e02d633d1368b46.exe"
1⤵
PID:1540

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1540-132-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download
memory/1540-133-0x0000000000400000-0x0000000000449000-memory.dmp

Filesize
292KB

Download