bcf1a86722824ffaacf2d2ac72670a7afa572e5c28f46434a33fc76e7c464d55 | Triage

Analysis

max time kernel
138s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-11-2022 23:29

Sharing

Report Analysis Logs

General

Target

bcf1a86722824ffaacf2d2ac72670a7afa572e5c28f46434a33fc76e7c464d55.exe
Size

119KB
MD5

0fc3cd8c4cc93337e235cf4bdedebb80
SHA1

84192bfbc419bec5de5eb264ff353c61d87d7304
SHA256

bcf1a86722824ffaacf2d2ac72670a7afa572e5c28f46434a33fc76e7c464d55
SHA512

8c6695ac8531337d046c7908abacaf43c87468f04ad7c06d8e53e2d3b98b401386ccbff289a72a0244ab386e40d4637cc30fbbfdb8ad49963f761c0c5f0b4633
SSDEEP

3072:l1W3koFABS7dUOyokx8LszCJ0EVrl7YMVxk3:lI2GdXyokx8Lqe0mlUMVxS

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\bcf1a86722824ffaacf2d2ac72670a7afa572e5c28f46434a33fc76e7c464d55.exe
"C:\Users\Admin\AppData\Local\Temp\bcf1a86722824ffaacf2d2ac72670a7afa572e5c28f46434a33fc76e7c464d55.exe"
1⤵
PID:1056

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads