95adc5c2ec87afd508717ab3fbffd89e8f0def72e139ec3fce94fedc310ed052 | Triage

Analysis

max time kernel
24s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23/11/2022, 22:59

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

95adc5c2ec87afd508717ab3fbffd89e8f0def72e139ec3fce94fedc310ed052.exe
Size

119KB
MD5

a4497069ba77ec13935b139affb2b2d2
SHA1

f17c2424873c565f34a27c09c44e1892c73f492a
SHA256

95adc5c2ec87afd508717ab3fbffd89e8f0def72e139ec3fce94fedc310ed052
SHA512

ae65bd90cb3f9da18c1267a04da546cf31e374d6d87a8f6ea89b35a642fca396575e2c236c0567a545cd97f03ab3163dcf4ef6dea309a3303a3e3566488a4aaf
SSDEEP

3072:LZMJnTeM4cJJNp1UnzCJS59VbDfeMsBi8DM5F:NeTeM/ZHIzmQfb7eBBq

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\95adc5c2ec87afd508717ab3fbffd89e8f0def72e139ec3fce94fedc310ed052.exe
"C:\Users\Admin\AppData\Local\Temp\95adc5c2ec87afd508717ab3fbffd89e8f0def72e139ec3fce94fedc310ed052.exe"
1⤵
PID:952

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/952-54-0x0000000075F81000-0x0000000075F83000-memory.dmp

Filesize
8KB

Download