fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31 | Triage

Analysis

max time kernel
90s
max time network
131s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 18:38

Sharing

Report Analysis Logs

General

Target

fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe
Size

94KB
MD5

53ed6695b0bd565afd3fec0e9790e4c0
SHA1

a43352dc18dbd3c2c6bcc8526be6156f1fecbfad
SHA256

fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31
SHA512

9f6c2818a4fcc9b047b55d5d0553cfbf4e3afb0e8c1fd19f75ca9427fd768a5e2402feac5a72aefdb9587ebc5c9265110f22cfa5c2c872aa5bcd66a3bb2e95f4
SSDEEP

1536:EpgpHzb9dZVX9fHMvG0D3XJhJcqoP2jfNuf42zEfzyIoF6KT1Xly38/lrBLrCPkc:ygXdZt9P6D3XJw7P2jfUfdzEfQXpVys0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe
"C:\Users\Admin\AppData\Local\Temp\fc577d181d422ffd2125f3a17e03bc76e9f17357258ba1ae14869e0f1ed0ff31.exe"
1⤵
PID:5016

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...