ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5 | Triage

Analysis

max time kernel
23s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19-10-2022 16:58

Sharing

Report Analysis Logs

General

Target

ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe
Size

357KB
MD5

a11be479ae7adb8b9fedc96ec5ff61e0
SHA1

c4031168feb26f5035392b5cb6635968d8fade3d
SHA256

ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5
SHA512

f0b194d2c9e81d2ea254ec4c4d115f062fe5a8b38faa8ad912409511510e662152f3bf972c69fde2f9b6578a9553fb6baf6cc94459968ce9c8c2c15dfd616d68
SSDEEP

6144:2e34o0C59Fpk0KkB8/BTP827dk4ggqNkL9ECA6dkj/mE3nzLuMte74CqOF9se5NP:F0wDk0KkcBTP8SxHEC9EC9wDXzLDte7f

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe
"C:\Users\Admin\AppData\Local\Temp\ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe"
1⤵
PID:1956

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1956-54-0x0000000074F01000-0x0000000074F03000-memory.dmp

Filesize
8KB

Download