57f9ef0391740948494d5c71be5134b451c691e1979084c4ad9dd32388800798 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-11-2022 22:37

Sharing

Report Analysis Logs

General

Target

57f9ef0391740948494d5c71be5134b451c691e1979084c4ad9dd32388800798.exe
Size

1.8MB
MD5

f7dbd95938428aa52e6ce098427b607c
SHA1

510b21c1950a9bbbe2f1d31f45d9d807347b4b24
SHA256

57f9ef0391740948494d5c71be5134b451c691e1979084c4ad9dd32388800798
SHA512

1af8f0ce1ace6ca541bd7d1c7a320aa95468feea773e9346a709e72eb1f34529b7e15828e2ea550dad9c172e657d07dbce0d4bb83b52e36c415f56d4bbaad341
SSDEEP

49152:496i+M5ypT0v9TrdFmrMbGKC43J8r0+T/D:4NYpT0v9TBFQqGK+YG/D

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\57f9ef0391740948494d5c71be5134b451c691e1979084c4ad9dd32388800798.exe
"C:\Users\Admin\AppData\Local\Temp\57f9ef0391740948494d5c71be5134b451c691e1979084c4ad9dd32388800798.exe"
1⤵
PID:2036

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2036-54-0x0000000075521000-0x0000000075523000-memory.dmp

Filesize
8KB

Download