3baab1f8edfb0d418966b663fc2b5753f2a980c17f1cb3dd6c69cef1e1887a90 | Triage

Analysis

max time kernel
39s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 23:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

3baab1f8edfb0d418966b663fc2b5753f2a980c17f1cb3dd6c69cef1e1887a90.exe
Size

108KB
MD5

7ae2629a2ed7827ad910fe813452dbcc
SHA1

1a3800ca7f5f7bbfdc81ba9efa416925719ca6e8
SHA256

3baab1f8edfb0d418966b663fc2b5753f2a980c17f1cb3dd6c69cef1e1887a90
SHA512

32b89f5b0ecbd899d9a1d8e6e4faca46ec2e0cad513468bb74b5d5997f7bcbf90e83e66caaa86b6d60dd65718cbd9d4fe65082520ee737d66c037dda4199d4e0
SSDEEP

1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwcqCIEnP:zozVZvJm01mBTqTEnP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3baab1f8edfb0d418966b663fc2b5753f2a980c17f1cb3dd6c69cef1e1887a90.exe
"C:\Users\Admin\AppData\Local\Temp\3baab1f8edfb0d418966b663fc2b5753f2a980c17f1cb3dd6c69cef1e1887a90.exe"
1⤵
PID:1588

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1588-54-0x0000000075661000-0x0000000075663000-memory.dmp

Filesize
8KB

Download