b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae | Triage

Analysis

max time kernel
17s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11/10/2022, 06:53

Sharing

Report Analysis Logs

General

Target

b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe
Size

835KB
MD5

49988c330fc1e00aa761349a463d1030
SHA1

46b5962553e70d3df52e33555a2edb7ab63b0fa5
SHA256

b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae
SHA512

11f0ff63ee958d07d1bb48539a9d523de68c60f834b47a4f3a1398e8f5157ce0f3fabf81be8716259f09f6da7a56ea67898f9ecb80333b8cbea82350d493a508
SSDEEP

12288:XmCp8Hh6pf6k9SbuHRkxI71mD0rIWby9ix084BNRKhduEgVWlXj2SpWUO3tqck5O:XmpkWoklE9bUix084d2mVWca83VSQd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe
"C:\Users\Admin\AppData\Local\Temp\b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe"
1⤵
PID:1784

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1784-54-0x00000000764D1000-0x00000000764D3000-memory.dmp

Filesize
8KB

Download