fc9901b4073a640cb7cf37b29e2dc6997455ae4c65370ad7427e41bc4efdd1bd | Triage

Analysis

max time kernel
37s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/10/2022, 15:33

Sharing

Report Analysis Logs

General

Target

fc9901b4073a640cb7cf37b29e2dc6997455ae4c65370ad7427e41bc4efdd1bd.exe
Size

351KB
MD5

603f6d03e00f6e7bad2c60dd8ef2a1d0
SHA1

10a483b561c2917a9cbd81a53e553ae6460cb15c
SHA256

fc9901b4073a640cb7cf37b29e2dc6997455ae4c65370ad7427e41bc4efdd1bd
SHA512

f3eeb1dd513e8d4d48be222690b89d9f7ac592a23da10c5b8c816b003e2c2bd042a1850cfeef7edf3a480e54ddc033aaa892947fb767b29bf5a7a91f0786c2df
SSDEEP

6144:ae34KLzzYRpFSyi2VeFPtis5hlXDKsu7hZ/kvjmiSijVUwOIvOVIIqN0VGRvb:xLnKSyiFWs5hkLdwmiSoVYV5qNvRb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fc9901b4073a640cb7cf37b29e2dc6997455ae4c65370ad7427e41bc4efdd1bd.exe
"C:\Users\Admin\AppData\Local\Temp\fc9901b4073a640cb7cf37b29e2dc6997455ae4c65370ad7427e41bc4efdd1bd.exe"
1⤵
PID:1976

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-54-0x00000000754E1000-0x00000000754E3000-memory.dmp

Filesize
8KB

Download