86595b161ec55ea06ff60aa0a889176e6f2008e7f92bda98918513e040ab9b88 | Triage

Analysis

max time kernel
41s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/11/2022, 22:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

86595b161ec55ea06ff60aa0a889176e6f2008e7f92bda98918513e040ab9b88.exe
Size

812KB
MD5

0b9c6512a6623981aee8818edb9fda1a
SHA1

894c8a59a8cc190904603fa4787d278a26012c79
SHA256

86595b161ec55ea06ff60aa0a889176e6f2008e7f92bda98918513e040ab9b88
SHA512

5b0331a0a9551eabb5ed5521ea0eda2f3a589b14a85602f0888acff6c5a7831ccbcfc95abd9b06f444ec9b06be49cb360371e001d1d15dd9ec2686cee98784f5
SSDEEP

24576:C5dJERYvgvwzocUHwkOzi8xwtJ6KyDaQ0iyrBOEgMRA4t:C5dYYovwz7PiFMuQMBtWG

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\86595b161ec55ea06ff60aa0a889176e6f2008e7f92bda98918513e040ab9b88.exe
"C:\Users\Admin\AppData\Local\Temp\86595b161ec55ea06ff60aa0a889176e6f2008e7f92bda98918513e040ab9b88.exe"
1⤵
PID:1788

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1788-54-0x0000000076321000-0x0000000076323000-memory.dmp

Filesize
8KB

Download