eed893fc5371b8816327695b02b5b4ff4fe57f540b383ffe8b0d20b8fbbb0748 | Triage

Analysis

max time kernel
36s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 07:41

Sharing

Report Analysis Logs

General

Target

eed893fc5371b8816327695b02b5b4ff4fe57f540b383ffe8b0d20b8fbbb0748.exe
Size

75KB
MD5

f37164772a1dd8f9f0ad4ef7f7af2d45
SHA1

442431e53cf6bb62756daf0edd23295b2268e513
SHA256

eed893fc5371b8816327695b02b5b4ff4fe57f540b383ffe8b0d20b8fbbb0748
SHA512

474473cbc2d99097cf177cc247e85be2d723d6fc400a3085676ba956571967ece5682c254560c1e28751684180290701681d9271e69d3382c24cd2d2ebacd2e5
SSDEEP

1536:fQpQ5EP0ijnRTXJNh4Romu/TIDsa177heiRSCJ+u:fQIURTXJr45J4aZhx5J+u

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\eed893fc5371b8816327695b02b5b4ff4fe57f540b383ffe8b0d20b8fbbb0748.exe
"C:\Users\Admin\AppData\Local\Temp\eed893fc5371b8816327695b02b5b4ff4fe57f540b383ffe8b0d20b8fbbb0748.exe"
1⤵
PID:1460

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1460-54-0x0000000075F81000-0x0000000075F83000-memory.dmp

Filesize
8KB

Download