fd43d50ecad0662414a006294ab692d18c25df64a32ddecb36663a6e3303ac4e | Triage

Analysis

max time kernel
81s
max time network
145s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/11/2022, 10:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

fd43d50ecad0662414a006294ab692d18c25df64a32ddecb36663a6e3303ac4e.exe
Size

507KB
MD5

19cb75ed0a75f0af5bdeedc49cf60f50
SHA1

64cb66be178b0ba4d1ce90cb386e40341e58c13d
SHA256

fd43d50ecad0662414a006294ab692d18c25df64a32ddecb36663a6e3303ac4e
SHA512

a6f57462e623750d596fe03282d1ce795a7db14544155f2fbc20675aeeb28f9f1f575f4e04a1ffbc5051fb30289be26da55563d81423d8a08ed06c6fbfe7f4d2
SSDEEP

12288:S3oDk0KkcBTP8SxHEC9EC9wDXzLDte7dNF9Ze+tBQKSsxOcfOhj9f:S3obW4ck819MLsZZe+tBQKgPRf

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fd43d50ecad0662414a006294ab692d18c25df64a32ddecb36663a6e3303ac4e.exe
"C:\Users\Admin\AppData\Local\Temp\fd43d50ecad0662414a006294ab692d18c25df64a32ddecb36663a6e3303ac4e.exe"
1⤵
PID:1824

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads