55ca991688e4ca93aff05e318d008947a6418d6ea4bccf60dc8b8cf282844f40 | Triage

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
10/10/2022, 19:24

Sharing

Report Analysis Logs

General

Target

55ca991688e4ca93aff05e318d008947a6418d6ea4bccf60dc8b8cf282844f40.exe
Size

85KB
MD5

135e2bb9d847cd714d8b9f9014326cdc
SHA1

d9a11ef90b7d2b4ee753dedf9b5e26d24667cff0
SHA256

55ca991688e4ca93aff05e318d008947a6418d6ea4bccf60dc8b8cf282844f40
SHA512

26e3543f2648012949c8372c4d805b23bca8687465192d9d4be0044cc6509b48c4fb1a372e1bc6d9d3743141dda54d6fb222b9dc5f511bf96599178c589d84a3
SSDEEP

1536:x63ssPZsIIU7t/EDc+8dUQpHAkAdRAzC77+0AG1sI+Wrez:03fPZsYh8c+8dUQpgkAUzQ7+L8F+Wry

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\55ca991688e4ca93aff05e318d008947a6418d6ea4bccf60dc8b8cf282844f40.exe
"C:\Users\Admin\AppData\Local\Temp\55ca991688e4ca93aff05e318d008947a6418d6ea4bccf60dc8b8cf282844f40.exe"
1⤵
PID:3892

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads