eb6943d5935235a0c58120ee95202bdb6e21001a1c5042775c931ece56771946 | Triage

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 11:04

Sharing

Report Analysis Logs

General

Target

eb6943d5935235a0c58120ee95202bdb6e21001a1c5042775c931ece56771946.exe
Size

171KB
MD5

3c6ef665ddb24e2ac7dc6146c711f83b
SHA1

1765d24413482f0c14d0a32e1e12ad5853e2146c
SHA256

eb6943d5935235a0c58120ee95202bdb6e21001a1c5042775c931ece56771946
SHA512

67b2ac843a3484128f7aa1d142033a5f48a6bfb6083b7ca393527a18e421737793a9f5713d90f234fc2829aa6e4cf01e07e64c309eaacae85d2397c64a190053
SSDEEP

3072:mgXdZt9P6D3XJReqwKN+BCWNfi8PHeqLRYipbBOnwWi5RLOP7UqD4kmtdAq:me34VwKuNqALJOiTcND4kq

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\eb6943d5935235a0c58120ee95202bdb6e21001a1c5042775c931ece56771946.exe
"C:\Users\Admin\AppData\Local\Temp\eb6943d5935235a0c58120ee95202bdb6e21001a1c5042775c931ece56771946.exe"
1⤵
PID:2080

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads