9f0657334b353fc36e0b2fb2162bd4e5621a7356aff8010ddce18704e5da512f | Triage

Analysis

max time kernel
33s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 14:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

9f0657334b353fc36e0b2fb2162bd4e5621a7356aff8010ddce18704e5da512f.exe
Size

940KB
MD5

a04c006042fad023706bb0647fd1cee1
SHA1

2572fce00d288fb5ca1d7c25c6b9c0229acb9cc9
SHA256

9f0657334b353fc36e0b2fb2162bd4e5621a7356aff8010ddce18704e5da512f
SHA512

4facd3743e87d47244521ef495a0f09c268af1ae091a1ce5d8771f2b97f854068a86e777b02c5fd6288259969ea67ba252edce2d4d4384e1067c9e453847826a
SSDEEP

24576:HRqBikHkN9Z9vC8LRrtKbiDYXVPf42rPmZV+/wR:oBI96q8H42reGU

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9f0657334b353fc36e0b2fb2162bd4e5621a7356aff8010ddce18704e5da512f.exe
"C:\Users\Admin\AppData\Local\Temp\9f0657334b353fc36e0b2fb2162bd4e5621a7356aff8010ddce18704e5da512f.exe"
1⤵
PID:1148

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1148-54-0x0000000074C11000-0x0000000074C13000-memory.dmp

Filesize
8KB

Download