b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae | Triage

Analysis

max time kernel
91s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2022, 06:53

Sharing

Report Analysis Logs

General

Target

b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe
Size

835KB
MD5

49988c330fc1e00aa761349a463d1030
SHA1

46b5962553e70d3df52e33555a2edb7ab63b0fa5
SHA256

b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae
SHA512

11f0ff63ee958d07d1bb48539a9d523de68c60f834b47a4f3a1398e8f5157ce0f3fabf81be8716259f09f6da7a56ea67898f9ecb80333b8cbea82350d493a508
SSDEEP

12288:XmCp8Hh6pf6k9SbuHRkxI71mD0rIWby9ix084BNRKhduEgVWlXj2SpWUO3tqck5O:XmpkWoklE9bUix084d2mVWca83VSQd

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe
"C:\Users\Admin\AppData\Local\Temp\b9b0b3ba01e8460980d2c8b75acf1d486cd143019857b950458347ffc024fcae.exe"
1⤵
PID:4880

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads