cbabebec30b27dedc4200afd8882233cfcdbfab9d9099304aabcdfece12c18e4 | Triage

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/11/2022, 19:09

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

cbabebec30b27dedc4200afd8882233cfcdbfab9d9099304aabcdfece12c18e4.exe
Size

3.6MB
MD5

a15ee84a4701a8192564aa9bc3ea9f4d
SHA1

eda8014ddf6c4b8518e30085ea4193eb20c614c9
SHA256

cbabebec30b27dedc4200afd8882233cfcdbfab9d9099304aabcdfece12c18e4
SHA512

13daba809f4f0645ddae4c5db1470bec90be3b7b8ef31da65e0abf1f949d20c8bd595f6cb71ad5dd4a3c23c6324aa155f04b007de5e1a8c2f61800702673be38
SSDEEP

98304:9uyrjoPVrfngC5LxpQemxu3gGUd+79CLVqyn4/felQTdz:rrjodfRRmxF1+79c/n4/fwQTdz

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\cbabebec30b27dedc4200afd8882233cfcdbfab9d9099304aabcdfece12c18e4.exe
"C:\Users\Admin\AppData\Local\Temp\cbabebec30b27dedc4200afd8882233cfcdbfab9d9099304aabcdfece12c18e4.exe"
1⤵
PID:1848

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1848-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download