5e0cf2a7f9e49afe81e2baefdcef9e752a283dfd7a4f36d0911146b0fe29479d | Triage

Analysis

max time kernel
47s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
19-10-2022 12:28

Sharing

Report Analysis Logs

General

Target

5e0cf2a7f9e49afe81e2baefdcef9e752a283dfd7a4f36d0911146b0fe29479d.exe
Size

143KB
MD5

92320de3c0ec80fa4371c5f97c121c80
SHA1

1ff29c9b7bb157162bdaabfe1afc1b41c0497019
SHA256

5e0cf2a7f9e49afe81e2baefdcef9e752a283dfd7a4f36d0911146b0fe29479d
SHA512

7700389df3b25fbf5be1bae17998f6c197219940519dcef94d2f04c47fa8dd938d0abc03407bf3546166e0f84af0b00efdaec70a2c76ad2d1cf3efc9bb70a517
SSDEEP

3072:t1W3koFABS7dU82cvuKlyMeL4LMmY/lpCbMZvf2Q4Xp:tI2Gd12cWuNeLRblp9fl4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\5e0cf2a7f9e49afe81e2baefdcef9e752a283dfd7a4f36d0911146b0fe29479d.exe
"C:\Users\Admin\AppData\Local\Temp\5e0cf2a7f9e49afe81e2baefdcef9e752a283dfd7a4f36d0911146b0fe29479d.exe"
1⤵
PID:960

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/960-54-0x00000000757A1000-0x00000000757A3000-memory.dmp

Filesize
8KB

Download