40f046806eddb6fa6e7ae75e3f9d6cb663d5ffb28c9cd833adab71bd7193a2bf | Triage

Analysis

max time kernel
20s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
20/10/2022, 16:43

Sharing

Report Analysis Logs

General

Target

40f046806eddb6fa6e7ae75e3f9d6cb663d5ffb28c9cd833adab71bd7193a2bf.exe
Size

273KB
MD5

a076f7358952cd0d85e2afda1bcf5bec
SHA1

59ab79199a9a6bb0d16b8b7491709b6cf4c8c036
SHA256

40f046806eddb6fa6e7ae75e3f9d6cb663d5ffb28c9cd833adab71bd7193a2bf
SHA512

ae151cab4555928c1cb0cfc2093165bdfd02d8b539911bb85a66586dd5f0948a084c85578554bbbe663b764cb57dc6ab691949b9d374e5b699691086a1195687
SSDEEP

6144:HME1nmg1tDbJ5621YNFdih2dF4TtaVlthdiLL572dmG9mc6KxN59YD:sgnJUB6RaVl0p2zB6C59YD

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\40f046806eddb6fa6e7ae75e3f9d6cb663d5ffb28c9cd833adab71bd7193a2bf.exe
"C:\Users\Admin\AppData\Local\Temp\40f046806eddb6fa6e7ae75e3f9d6cb663d5ffb28c9cd833adab71bd7193a2bf.exe"
1⤵
PID:1972

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1972-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download