ab98a7aa1b2282be060fb5e6b687fcdccc404a8774b64b93fbc8578feadabb61 | Triage

Analysis

max time kernel
38s
max time network
70s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 08:16

Sharing

Report Analysis Logs

General

Target

ab98a7aa1b2282be060fb5e6b687fcdccc404a8774b64b93fbc8578feadabb61.exe
Size

191KB
MD5

3a015383e4ee256de70bf0ab161196f8
SHA1

aa9ae97929489a2bf076c0a3e4e2e9b41fae0cf3
SHA256

ab98a7aa1b2282be060fb5e6b687fcdccc404a8774b64b93fbc8578feadabb61
SHA512

7aca9f6e15015a50b68bee0fb3d9e39678ef44793a7380e9d2c30d26efac442dfab60a4cbdfbc182dd68bafe146581bce1320b0bd2c5a18a79255b7a6fae2677
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0dM:HAVySV1eY4k437d+4wkTHdS2L4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\ab98a7aa1b2282be060fb5e6b687fcdccc404a8774b64b93fbc8578feadabb61.exe
"C:\Users\Admin\AppData\Local\Temp\ab98a7aa1b2282be060fb5e6b687fcdccc404a8774b64b93fbc8578feadabb61.exe"
1⤵
PID:1752

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1752-54-0x0000000076091000-0x0000000076093000-memory.dmp

Filesize
8KB

Download