55bd8a90890efa1fa68900c8e781e867c164b14c103204cdd1e9423c5763e28d | Triage

Analysis

max time kernel
41s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
23-11-2022 19:02

Sharing

Report Analysis Logs

General

Target

Dnf连发_7月9日(连发程序v1.0.3绿色版下载)/Dnf连发工具.exe
Size

260KB
MD5

fc2e73824f78609c27efab5fa7c73493
SHA1

78d62dec4ba87bd8ed0ee9751b63fc5d0668dc3a
SHA256

c61ecaeab40591b89f8138333499b40a0060e02ce11403499e829b7f588e7a12
SHA512

abbae4bf59f442b01a0186a0e0c63a5b41c67c43ace11b8e1c2ad1a094c4b1b9fb60f074800bf05034e9e5bf7fe01ae2323e0a2fcacda353267514b8fc8e0f6e
SSDEEP

6144:LhR5nr+Pzr1Gq/Jf+2upbKOCeY9nP878g9M:9r+PfP/J2baecrg9M

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Dnf连发_7月9日(连发程序v1.0.3绿色版下载)\Dnf连发工具.exe
"C:\Users\Admin\AppData\Local\Temp\Dnf连发_7月9日(连发程序v1.0.3绿色版下载)\Dnf连发工具.exe"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2024-54-0x0000000075811000-0x0000000075813000-memory.dmp

Filesize
8KB

Download