db7d62a2efdab86df821482681d82f9cb7cf52829ed98b0b85a3f59bf486c9db | Triage

Analysis

max time kernel
45s
max time network
48s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05-11-2022 18:50

Sharing

Report Analysis Logs

General

Target

db7d62a2efdab86df821482681d82f9cb7cf52829ed98b0b85a3f59bf486c9db.exe
Size

503KB
MD5

bdf2fbc98e88f1782103472ded494525
SHA1

32b5e5999a6167649138502fa1da609011d90851
SHA256

db7d62a2efdab86df821482681d82f9cb7cf52829ed98b0b85a3f59bf486c9db
SHA512

a4b800312b4f3d2032e783f97cecda30118075228363903dc102826a6ca98653f456990f820752ffb6565519748075a789f116f6a0d665b8c6d9f2183f484c95
SSDEEP

6144:2JzEQNkEIwkfQ7DfILFwIz/YQ1goViydJDOPacaHeElQcb5hdb8ZxW:25WEIwkfQHILFwYrrVTp+ElQc98Zx

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\db7d62a2efdab86df821482681d82f9cb7cf52829ed98b0b85a3f59bf486c9db.exe
"C:\Users\Admin\AppData\Local\Temp\db7d62a2efdab86df821482681d82f9cb7cf52829ed98b0b85a3f59bf486c9db.exe"
1⤵
PID:536

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/536-54-0x0000000075B11000-0x0000000075B13000-memory.dmp

Filesize
8KB

Download