d22d2978c716281025834bb6d10f66d16587671ef3b930485f9e0bdfee7cd69f | Triage

Analysis

max time kernel
133s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
03-10-2022 15:34

Sharing

Report Analysis Logs

General

Target

d22d2978c716281025834bb6d10f66d16587671ef3b930485f9e0bdfee7cd69f.exe
Size

156KB
MD5

68aeda59b0410cbe4e3560492580cc00
SHA1

e2e3bd8f998bc11663fcd8c049f9ce99578ed2fd
SHA256

d22d2978c716281025834bb6d10f66d16587671ef3b930485f9e0bdfee7cd69f
SHA512

1fe41705d27b608347447d20a9ebb51b0501c9c6971d95170f0b00365c1b3062638e5c934da39fabf3de4d814f8707706c0ef4950751a1a56e3ca6213c880b35
SSDEEP

3072:hS17XJiDxmJeVSnmXAnMmjY30DW3+yJi7csil9zlSgAvmYb+VlytHaLqIcHtj9:hGizVsD++yJkQl9zlGvdb+VUxaLbQR

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d22d2978c716281025834bb6d10f66d16587671ef3b930485f9e0bdfee7cd69f.exe
"C:\Users\Admin\AppData\Local\Temp\d22d2978c716281025834bb6d10f66d16587671ef3b930485f9e0bdfee7cd69f.exe"
1⤵
PID:1308

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads