1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3 | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/11/2022, 14:59

Sharing

Report Analysis Logs

General

Target

1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe
Size

98KB
MD5

0566e2dbaabf22b77038157992019cd0
SHA1

529864c1fdfbb99bb5191a242d63cf7e8749913b
SHA256

1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3
SHA512

4f750d842c7bea560254e0c3878f785fbc8555c8821264337f655f06cbb6e19e5dc4bd380c01f114bb7608f0c45fdf6964681290cb66838c9f9caa42ac07f0ea
SSDEEP

1536:EYTmwVUsW7dtJMHy0DxmJRppVM2RQRY/+v++3X0boy2EJU4cZjpK8PhYtHZec:nS17XJiDxmJRppq2RQe+30oy9QZjmZec

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe
"C:\Users\Admin\AppData\Local\Temp\1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe"
1⤵
PID:1944

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1944-54-0x0000000075CF1000-0x0000000075CF3000-memory.dmp

Filesize
8KB

Download