68cee457448f1db2f7c8688fec8ea85725b5001c0475180ca2b65b8cb8b50b1a | Triage

Analysis

max time kernel
39s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 14:57

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

68cee457448f1db2f7c8688fec8ea85725b5001c0475180ca2b65b8cb8b50b1a.exe
Size

827KB
MD5

13c3067a92e9f43b22c9996c83b64d50
SHA1

42c4e4f73b03585786b18a8d86dd2d1f2ce321a8
SHA256

68cee457448f1db2f7c8688fec8ea85725b5001c0475180ca2b65b8cb8b50b1a
SHA512

321ab4142fb8ac6257a4f553e5947e109636d818eb9b75a1dc2cded6608ad7ce60c6b258b4187d8fd66f2369809bee7f51a8f622fcbde504ebac0025cf699825
SSDEEP

24576:xBbW4ck819MLsZZe+tBQKgPRtIcSI5SU9iWA:D1cn19MIDQKgZ5SUUN

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\68cee457448f1db2f7c8688fec8ea85725b5001c0475180ca2b65b8cb8b50b1a.exe
"C:\Users\Admin\AppData\Local\Temp\68cee457448f1db2f7c8688fec8ea85725b5001c0475180ca2b65b8cb8b50b1a.exe"
1⤵
PID:1760

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1760-54-0x0000000075C51000-0x0000000075C53000-memory.dmp

Filesize
8KB

Download