dafc7130fd687af212f1704fd3057b8189d65b1bbeaa91ed801f12d0d6e5089f | Triage

Analysis

max time kernel
91s
max time network
107s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
20-10-2022 21:13

Sharing

Report Analysis Logs

General

Target

dafc7130fd687af212f1704fd3057b8189d65b1bbeaa91ed801f12d0d6e5089f.exe
Size

848KB
MD5

56a6e2fb7c65cbc570f3b8c29ffa68c0
SHA1

aab7b6bb481377f495f98458eb72e5e4a3bb0751
SHA256

dafc7130fd687af212f1704fd3057b8189d65b1bbeaa91ed801f12d0d6e5089f
SHA512

8ae682ad72aa440faae492e359544803c350078cb3947b3fd794fb0e691fd1a08239fa289c46b660c1b337aed5e1751d5ccc27784634f42e30739e9aaee0e510
SSDEEP

24576:bGaV7pmOuyFFYHDtMeC8452i1GQUSB9eSjLCtpk0:6o7p5iZZd4528rUSB85

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\dafc7130fd687af212f1704fd3057b8189d65b1bbeaa91ed801f12d0d6e5089f.exe
"C:\Users\Admin\AppData\Local\Temp\dafc7130fd687af212f1704fd3057b8189d65b1bbeaa91ed801f12d0d6e5089f.exe"
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads