7e902ccde5a354b61baa48fca54291367d39c2847f1b1f405feed9b546817158 | Triage

Analysis

max time kernel
37s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/10/2022, 12:07

Sharing

Report Analysis Logs

General

Target

7e902ccde5a354b61baa48fca54291367d39c2847f1b1f405feed9b546817158.exe
Size

173KB
MD5

9ef5be994430de6a1737655a032c9d19
SHA1

ba36733d082e25dca6d3e67898b1aea65e897813
SHA256

7e902ccde5a354b61baa48fca54291367d39c2847f1b1f405feed9b546817158
SHA512

17920d52f2b2637cf0ca05c7b066d02c384b74c2a7a01a76192501d1c23e59b6da0d857ea0bd2d9536de607b235dc1afbe1197c67a9caf9a9254872716f6b4fa
SSDEEP

3072:jdszWOITsEL50jl7yIRdxVwqc2TcweciCwo8ujkU463if6ZdSZB+yHksHv1WRyc3:2zZZJRdxVwqc2Tcwec7bkn6q63SD+VM0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\7e902ccde5a354b61baa48fca54291367d39c2847f1b1f405feed9b546817158.exe
"C:\Users\Admin\AppData\Local\Temp\7e902ccde5a354b61baa48fca54291367d39c2847f1b1f405feed9b546817158.exe"
1⤵
PID:748

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/748-54-0x0000000074FB1000-0x0000000074FB3000-memory.dmp

Filesize
8KB

Download