2c56d37f4f0cfa9df27adbee2b6099ec3f11f95fed0e9017496d517c4427b4e6 | Triage

Analysis

max time kernel
221s
max time network
336s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23/11/2022, 23:19

Sharing

Report Analysis Logs

General

Target

2c56d37f4f0cfa9df27adbee2b6099ec3f11f95fed0e9017496d517c4427b4e6.exe
Size

315KB
MD5

5240758472021accbe0e285df3c1d240
SHA1

3a5ae952f7078c642c1697b8ecc38a0b61101044
SHA256

2c56d37f4f0cfa9df27adbee2b6099ec3f11f95fed0e9017496d517c4427b4e6
SHA512

fe91b09caefd78cf0d432fe514202d7d22af772826a1176baf922fb84266886ae2d76dd8ae77cbab54efe805ca5830a713e99291320f746676ad84b1dd1e9a0b
SSDEEP

6144:ue34EoB0JoLIfWS59Fpk0KkB8/BTP827dk4ggqNkL9ECA6dkj/mE3nzLuMte74H:7oBEOrADk0KkcBTP8SxHEC9EC9wDXzLx

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2c56d37f4f0cfa9df27adbee2b6099ec3f11f95fed0e9017496d517c4427b4e6.exe
"C:\Users\Admin\AppData\Local\Temp\2c56d37f4f0cfa9df27adbee2b6099ec3f11f95fed0e9017496d517c4427b4e6.exe"
1⤵
PID:556

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/556-54-0x0000000076581000-0x0000000076583000-memory.dmp

Filesize
8KB

Download