c659e36e67ba8cbaa84a2cbe627abd30a7d658953fed041ad400a159ced4bd15 | Triage

Analysis

max time kernel
91s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
14/10/2022, 09:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c659e36e67ba8cbaa84a2cbe627abd30a7d658953fed041ad400a159ced4bd15.exe
Size

161KB
MD5

6e2a837ae6097d2540535e524f1c68f0
SHA1

df9eb34c569ced2afa0c45c276091d353281d8dc
SHA256

c659e36e67ba8cbaa84a2cbe627abd30a7d658953fed041ad400a159ced4bd15
SHA512

0c20cfd5b44bc80ce92e5c434e494f12f3b4a2ecee56bc1badf8a50bd861089e75d8c98e5a088da293a6023032de3d3555c0ca5d6b54ae371e2e1acd998fd1a1
SSDEEP

3072:2gXdZt9P6D3XJPZE+K4CEohH1YxzgWZ/R/hH+E37EmChRie9aEe16kTSx6mcIZgU:2e34ri4Uogw/TH+47ER0Ee16kTccQgU

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c659e36e67ba8cbaa84a2cbe627abd30a7d658953fed041ad400a159ced4bd15.exe
"C:\Users\Admin\AppData\Local\Temp\c659e36e67ba8cbaa84a2cbe627abd30a7d658953fed041ad400a159ced4bd15.exe"
1⤵
PID:2708

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads