e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2 | Triage

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29-10-2022 07:56

Sharing

Report Analysis Logs

General

Target

e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2.exe
Size

2.6MB
MD5

4ab9c8978f674eae73ea1602679497c9
SHA1

1c80a489e54ffce61e6bcca1f0c9bf9226dcd1ad
SHA256

e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2
SHA512

f292cf2ef1eff439959bf4d41d674dc4baf08765e5c524ca33b04d28ed13d520661f90f1a984fa6be557fef4ac8344d23c425c1f04bf64f5b6dbf2dda10d4762
SSDEEP

49152:RdKARLE4rFVCXzUDWIBf6E8pUPGLwlrNIdGmzkmpGF/xQCK6815Civ:RdKAbTDHfYuPYIrNwzBpGRKn68159v

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2.exe
"C:\Users\Admin\AppData\Local\Temp\e2f5d700e48191bcc450c5cbaf7c283a680afe430bde0489bc1060591ed499b2.exe"
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-54-0x0000000075501000-0x0000000075503000-memory.dmp

Filesize
8KB

Download