6350b45beef1ad7bf07963013232cd4cbc752fd68752e7ab58d801764b3d0102 | Triage

Resubmissions

28/10/2022, 22:08

221028-12d1nahgdr 1

28/10/2022, 22:03

221028-1ytxpshbc3 3

Analysis

max time kernel
46s
max time network
56s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/10/2022, 22:03

Sharing

Report Analysis Logs

General

Target

setup.exe
Size

1.1MB
MD5

a62e4376d16afbdb83487bfefce7bba8
SHA1

d9c974cbaa04f11084f87e5af3d7285de7cb95c1
SHA256

6350b45beef1ad7bf07963013232cd4cbc752fd68752e7ab58d801764b3d0102
SHA512

37928e73ed3621ddbea39248b30c3e51a557764676d7c1dfc0060fec5f777d67e6fc6e7139a46cf6799ea8c8f6b48c4cbd57e30050dc991ad38b3a8f5c9dc2b6
SSDEEP

12288:XkDB21/SsVIMrD6GFe6jhguSI7zu9eMb01JQntLOCTaTU8UQ:X40/SsVIIDhy9emTao8

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\setup.exe
"C:\Users\Admin\AppData\Local\Temp\setup.exe"
1⤵
PID:1672

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1672-54-0x0000000075841000-0x0000000075843000-memory.dmp

Filesize
8KB

Download