1f9b966e220fef4e273346791de23aadd785a1af9d201f668b6b1114d9dac6cd | Triage

Analysis

max time kernel
8s
max time network
49s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 04:11

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1f9b966e220fef4e273346791de23aadd785a1af9d201f668b6b1114d9dac6cd.exe
Size

1.6MB
MD5

5f927e172294ae9d9289c747c1dd3420
SHA1

34824b1e583fd57e363af1a6d22455ef49cc8d6f
SHA256

1f9b966e220fef4e273346791de23aadd785a1af9d201f668b6b1114d9dac6cd
SHA512

0774354d12b57f9b165cdff6cf337d6c626249d60f7166de1369be4e12c145ebe8bf975faff2dc6cfc86c830069f12b09facc408316fa60a0311d21233d1b442
SSDEEP

49152:jch6J6YmwXuTv+sAFEVSnaBh356UtBQsn:IUCwejzVSna75RKsn

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1f9b966e220fef4e273346791de23aadd785a1af9d201f668b6b1114d9dac6cd.exe
"C:\Users\Admin\AppData\Local\Temp\1f9b966e220fef4e273346791de23aadd785a1af9d201f668b6b1114d9dac6cd.exe"
1⤵
PID:4336

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads