d37c8207471b6e13223516990f85098180be5a1971e92d20668e61cfc0bc6ff0

Analysis

max time kernel
175s
max time network
188s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 04:36

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d37c8207471b6e13223516990f85098180be5a1971e92d20668e61cfc0bc6ff0.exe
Size

60KB
MD5

3bd1e67c2b3d968f595d470ed0f2e6a1
SHA1

c72d16efac780b81adab21b13e4354bdcbda72eb
SHA256

d37c8207471b6e13223516990f85098180be5a1971e92d20668e61cfc0bc6ff0
SHA512

c4e5437fb532dd321bfbf33d24306533e4665bbbc1c61bbce55b4234224c4f9ab49435d5dc0e51c81be37a79c939c122c4ab2fa425b7330d37d500b0127fd5e7
SSDEEP

1536:QOWMeByYaSvXu4VX18pWZJD2g9zcnXIeYOMdQN2CP4blHbi:QOWeoXu+OpSDdgll1N2iMm

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral2/memory/3788-132-0x0000000000400000-0x0000000000432000-memory.dmp	upx
behavioral2/memory/3788-133-0x0000000000400000-0x0000000000432000-memory.dmp	upx

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d37c8207471b6e13223516990f85098180be5a1971e92d20668e61cfc0bc6ff0.exe
"C:\Users\Admin\AppData\Local\Temp\d37c8207471b6e13223516990f85098180be5a1971e92d20668e61cfc0bc6ff0.exe"
1⤵
PID:3788

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/3788-132-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download
memory/3788-133-0x0000000000400000-0x0000000000432000-memory.dmp

Filesize
200KB

Download