f06db5d23872b2f1c7d0e3a9ccf2cb03dc6ca811d3f1bb8355c6ed17f45b0a28 | Triage

Analysis

max time kernel
22s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 10:22

Sharing

Report Analysis Logs

General

Target

f06db5d23872b2f1c7d0e3a9ccf2cb03dc6ca811d3f1bb8355c6ed17f45b0a28.exe
Size

2.9MB
MD5

be33aa519e421633778bae902958aac0
SHA1

daac4a82d9f0d298493c74db7cfd7616aaf397b0
SHA256

f06db5d23872b2f1c7d0e3a9ccf2cb03dc6ca811d3f1bb8355c6ed17f45b0a28
SHA512

d403394ff82f26d8ba3b0b742f333507bc1fb4a32275457567b6ccc90e5e0427d21acdd7411a7c91acf63ddcea90065a6ad0d386e10af30d3c8b853d28ddf192
SSDEEP

49152:OdIenmTjulpFQcinB9DOe3WWv4RD0YdkLmy/1rLcctNC7QIYKI0QZQVlhcyfGh:OdIfju9QcinBMe3Qwmy/10ABI40QZUlY

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\f06db5d23872b2f1c7d0e3a9ccf2cb03dc6ca811d3f1bb8355c6ed17f45b0a28.exe
"C:\Users\Admin\AppData\Local\Temp\f06db5d23872b2f1c7d0e3a9ccf2cb03dc6ca811d3f1bb8355c6ed17f45b0a28.exe"
1⤵
PID:1632

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1632-54-0x0000000075071000-0x0000000075073000-memory.dmp

Filesize
8KB

Download