2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1

Analysis

max time kernel
37s
max time network
52s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 08:49

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe
Size

1.4MB
MD5

0f3d4c1ad7616bb454e3d08270bd0381
SHA1

eba8be243ea73d3db8650f0723309b1b174e3762
SHA256

2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1
SHA512

7cc7bd40586491cfabeb761165dc03575c64e61c08c0cc66f2ec8b5d08b889f2cc507f01129f6c3e909ab4d353d520ac05dd76e683b14c1f6c1b934742e5d69e
SSDEEP

24576:7bZdK5FDjLf6Cib03RWDGukZL+CRo/pZd+xV9TC+514m9uHc+Kh6WG34us+8dD:PZd6lUxhMRmd+/9G+Qm9qc++RuE

Score

8^/10

Malware Config

Signatures

Downloads MZ/PE file
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe
"C:\Users\Admin\AppData\Local\Temp\2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe"
1⤵
PID:1876
- C:\Users\Admin\AppData\Local\Temp\nsy9198.tmp\DC2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe
  "C:\Users\Admin\AppData\Local\Temp\nsy9198.tmp\DC2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe"
  2⤵
  PID:956

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsy9198.tmp\DC2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe

Filesize
27KB

MD5
945190272a3ab74e7a0a940057738391

SHA1
cb275c13a4a03de2c13c0b84aeeee148a8f0ad17

SHA256
06d7c978b65b41a497da0f7cb069c72b9cd374442f3ab5009db2fb7af61e03a6

SHA512
c67998bc374063fe05763d88d8d92020d12163925a6cc0cb9f99a53920b7e6050483db29bb397106e631de03bc77285ea74957d14722d6913e74ff52bc7a9abb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy9198.tmp\DC2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe

Filesize
28KB

MD5
058992b77dcadb578db7303012d4e6ae

SHA1
dc5c886bac15f9f19754247a0ce1a6142dbd85f1

SHA256
4e16767b40a0f69cb881973966c94dd0a1353b1fff41b14c07054b1a758a0012

SHA512
1d68da7d5569fb4b994a6da74e0200ff295ebe5c1ffc6d7ed27da85fa0d926b6c50cbea20111a56ba6e749b9ce7f82c9bd2bb1d5ece34a31027b038c827a14f5

Download Submit
\Users\Admin\AppData\Local\Temp\nsy9198.tmp\D1989.dll

Filesize
14KB

MD5
904beebec2790ee2ca0c90fc448ac7e0

SHA1
40fabf1eb0a3b7168351c4514c5288216cb1566d

SHA256
f730d9385bf72eac5d579bcf1f7e4330f1d239ca1054d4ead48e9e363d9f4222

SHA512
8bdbbaaf73e396cf9fd9866b3e824b7e70c59a2bdefdb3236387e60d0e645d011265fe79fb193f6c0d6abe2e9c01260720c71cd8f068fcc4624760511c54efaa

Download Submit
\Users\Admin\AppData\Local\Temp\nsy9198.tmp\DC2a58d83a57841fb3edcea0387e43b6d43f8f2dc4139fb3493333c4a088a39cc1.exe

Filesize
13KB

MD5
41e4e295a130683008ebeb3cfdbdc70d

SHA1
a17b676c276c1d0610a1a788f56186af397334e7

SHA256
ff85bc5714e41ee8a80c23abd48cbb478c5dfa57c09a9c800fc326ce61a54c8e

SHA512
c780b92a0804b5e33baa80c4e5e5dee3a16e6034353966951c2080229ae27e0e8ece631f684cc40e9a58fbaa7b2555f9bba011d0fa7ff2e1b579b244b020498c

Download Submit
\Users\Admin\AppData\Local\Temp\nsy9198.tmp\System.dll

Filesize
11KB

MD5
a436db0c473a087eb61ff5c53c34ba27

SHA1
65ea67e424e75f5065132b539c8b2eda88aa0506

SHA256
75ed40311875312617d6711baed0be29fcaee71031ca27a8d308a72b15a51e49

SHA512
908f46a855480af6eacb2fb64de0e60b1e04bbb10b23992e2cf38a4cbebdcd7d3928c4c022d7ad9f7479265a8f426b93eef580afec95570e654c360d62f5e08d

Download Submit
memory/1876-54-0x0000000075A11000-0x0000000075A13000-memory.dmp

Filesize
8KB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads