fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31 | Triage

Analysis

max time kernel
44s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 18:38

Sharing

Report Analysis Logs

General

Target

fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe
Size

94KB
MD5

53ed6695b0bd565afd3fec0e9790e4c0
SHA1

a43352dc18dbd3c2c6bcc8526be6156f1fecbfad
SHA256

fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31
SHA512

9f6c2818a4fcc9b047b55d5d0553cfbf4e3afb0e8c1fd19f75ca9427fd768a5e2402feac5a72aefdb9587ebc5c9265110f22cfa5c2c872aa5bcd66a3bb2e95f4
SSDEEP

1536:EpgpHzb9dZVX9fHMvG0D3XJhJcqoP2jfNuf42zEfzyIoF6KT1Xly38/lrBLrCPkc:ygXdZt9P6D3XJw7P2jfUfdzEfQXpVys0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe
"C:\Users\Admin\AppData\Local\Temp\fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe"
1⤵
PID:1048

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1048-54-0x00000000759F1000-0x00000000759F3000-memory.dmp

Filesize
8KB

Download