30e55582f99ea3e38660bfd9015a2e3ae603b37fd1ea4e6cdfd93d0a05da8f50 | Triage

Analysis

max time kernel
41s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07-11-2022 04:11

Sharing

Report Analysis Logs

General

Target

30e55582f99ea3e38660bfd9015a2e3ae603b37fd1ea4e6cdfd93d0a05da8f50.exe
Size

763KB
MD5

0ec84d6d0d9fab94107dd62f83892c80
SHA1

498b5f7c6eae4f1d4cd37ae97e5a9fcc5dcb6d5c
SHA256

30e55582f99ea3e38660bfd9015a2e3ae603b37fd1ea4e6cdfd93d0a05da8f50
SHA512

a879f2429fd3383e8ef82d543530fe9a743b8551224f77aab51226b1e20053887674c5716533c7c3c04bf8d67f1f628889d5951070f666b01fc103b27630ad84
SSDEEP

12288:7M/wFIFW86fAKgQTnsSwSD1j6ZlbGZD/kdya7fVbPT4Gk8fkArBmw/riXcWVuxLK:7M/wOF9ZHQTslXZliDQ754v8sOljisy/

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\30e55582f99ea3e38660bfd9015a2e3ae603b37fd1ea4e6cdfd93d0a05da8f50.exe
"C:\Users\Admin\AppData\Local\Temp\30e55582f99ea3e38660bfd9015a2e3ae603b37fd1ea4e6cdfd93d0a05da8f50.exe"
1⤵
PID:1640

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1640-54-0x0000000075811000-0x0000000075813000-memory.dmp

Filesize
8KB

Download