53183277058738d4ac0833ee2401df8cf49599da2a2e8d46375bcab8af86e4fa | Triage

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
06/11/2022, 04:36

Sharing

Report Analysis Logs

General

Target

53183277058738d4ac0833ee2401df8cf49599da2a2e8d46375bcab8af86e4fa.exe
Size

108KB
MD5

37b4764152918a369f7d68b7ccab0d80
SHA1

82f7b0d0bfc56eaffeaa6f158ff8c3ce080ac34e
SHA256

53183277058738d4ac0833ee2401df8cf49599da2a2e8d46375bcab8af86e4fa
SHA512

f32c237001c21c7b84a10b54823873124d0a63013f81ed7c0108aa792671e942d271c0300ebeef80bc4546af5f79c2395a838b534183179632439967c91a7270
SSDEEP

3072:LizjyRDxUhKAfckJpjAdN7SM7y4oeUmSbAwNsgSOpX:mjyRDxUhYW8DSMe4oBmd/o

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\53183277058738d4ac0833ee2401df8cf49599da2a2e8d46375bcab8af86e4fa.exe
"C:\Users\Admin\AppData\Local\Temp\53183277058738d4ac0833ee2401df8cf49599da2a2e8d46375bcab8af86e4fa.exe"
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2032-54-0x00000000766D1000-0x00000000766D3000-memory.dmp

Filesize
8KB

Download