44778c8ff4a8447dc895c1e1a9dcf8634df1d14d4daae36ce7869b564ae0485b | Triage

Analysis

max time kernel
39s
max time network
47s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
29-10-2022 12:09

Sharing

Report Analysis Logs

General

Target

44778c8ff4a8447dc895c1e1a9dcf8634df1d14d4daae36ce7869b564ae0485b.exe
Size

98KB
MD5

755527ced7e077472c78166a1c2eb26c
SHA1

cf47a458c8bec7c28a278ce53cfd0ee90b91d976
SHA256

44778c8ff4a8447dc895c1e1a9dcf8634df1d14d4daae36ce7869b564ae0485b
SHA512

445847e392ef1bd1aba58c8f362d619c6339167497c8af8f512e8ba172fa36b181a7805f8945632bb330ce5012960b1f9ca632ee1a394102cb8d8dfa7a420dc5
SSDEEP

3072:S1W3koFABSLdUQTrmuWA5QOhlWFJ1zGrw:SI2WdpTzqz7

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\44778c8ff4a8447dc895c1e1a9dcf8634df1d14d4daae36ce7869b564ae0485b.exe
"C:\Users\Admin\AppData\Local\Temp\44778c8ff4a8447dc895c1e1a9dcf8634df1d14d4daae36ce7869b564ae0485b.exe"
1⤵
PID:956

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/956-54-0x0000000076561000-0x0000000076563000-memory.dmp

Filesize
8KB

Download