e45f9f1ad19ae1cbb9e37ad8fd9a3aa854c15e8d8c8e1af1b0c528677c2ca4d7 | Triage

Analysis

max time kernel
48s
max time network
52s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
06-11-2022 05:00

Sharing

Report Analysis Logs

General

Target

e45f9f1ad19ae1cbb9e37ad8fd9a3aa854c15e8d8c8e1af1b0c528677c2ca4d7.exe
Size

738KB
MD5

30886d17e5751534c5ba9bb04fcf83c0
SHA1

ed5e11ad50baa2c61ad2d951ede107ed93ccb061
SHA256

e45f9f1ad19ae1cbb9e37ad8fd9a3aa854c15e8d8c8e1af1b0c528677c2ca4d7
SHA512

e03400bbaaa7b67449ecae0edfb863eacc4fbcf23f48703cc42dc2ac13543395f0ebb4cbef4ec7777cb52d14d9c7e10097bf34fab6054aff9ef295318558ad70
SSDEEP

12288:OfDk0KkcBTP8SxHEC9EC9wDXzLDte7dNF9Ze+tBQKSsxOcfOhj9lJumzfIcSI5S6:OfbW4ck819MLsZZe+tBQKgPRtIcSI5l

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e45f9f1ad19ae1cbb9e37ad8fd9a3aa854c15e8d8c8e1af1b0c528677c2ca4d7.exe
"C:\Users\Admin\AppData\Local\Temp\e45f9f1ad19ae1cbb9e37ad8fd9a3aa854c15e8d8c8e1af1b0c528677c2ca4d7.exe"
1⤵
PID:1536

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1536-54-0x0000000075681000-0x0000000075683000-memory.dmp

Filesize
8KB

Download