1ca4cab41e3605ee2fb0143b834becd98d3682f9337b1e237cba32455a5bd89a | Triage

Analysis

max time kernel
153s
max time network
54s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23/11/2022, 23:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

1ca4cab41e3605ee2fb0143b834becd98d3682f9337b1e237cba32455a5bd89a.exe
Size

91KB
MD5

3708b1118887127405ef5a0da54f2826
SHA1

a40c7d62e939f63d0f7cbc89550b99eeccf29b9e
SHA256

1ca4cab41e3605ee2fb0143b834becd98d3682f9337b1e237cba32455a5bd89a
SHA512

b14205f23859ceeea0f246940a2a8c32068dc1268cd2419ad5dd7a1b7bad38f404eb9b748d70669a0b19ab6c2f5c6d43bc60321159fc0f1c9b12542ef75beb2a
SSDEEP

1536:D3o/IOdnToIfttx5TlGYZ+HoL1kk3kGRiNu17vGWoKI3/LzmB/gG6l:ToxVTBftt1GYZ+IL1kk3kGmuFukI3/eK

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\1ca4cab41e3605ee2fb0143b834becd98d3682f9337b1e237cba32455a5bd89a.exe
"C:\Users\Admin\AppData\Local\Temp\1ca4cab41e3605ee2fb0143b834becd98d3682f9337b1e237cba32455a5bd89a.exe"
1⤵
PID:1896

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1896-54-0x0000000076181000-0x0000000076183000-memory.dmp

Filesize
8KB

Download