55bd8a90890efa1fa68900c8e781e867c164b14c103204cdd1e9423c5763e28d | Triage

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
23-11-2022 19:02

Sharing

Report Analysis Logs

General

Target

Dnf连发_7月9日(连发程序v1.0.3绿色版下载)/Dnf连发工具.exe
Size

260KB
MD5

fc2e73824f78609c27efab5fa7c73493
SHA1

78d62dec4ba87bd8ed0ee9751b63fc5d0668dc3a
SHA256

c61ecaeab40591b89f8138333499b40a0060e02ce11403499e829b7f588e7a12
SHA512

abbae4bf59f442b01a0186a0e0c63a5b41c67c43ace11b8e1c2ad1a094c4b1b9fb60f074800bf05034e9e5bf7fe01ae2323e0a2fcacda353267514b8fc8e0f6e
SSDEEP

6144:LhR5nr+Pzr1Gq/Jf+2upbKOCeY9nP878g9M:9r+PfP/J2baecrg9M

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Dnf连发_7月9日(连发程序v1.0.3绿色版下载)\Dnf连发工具.exe
"C:\Users\Admin\AppData\Local\Temp\Dnf连发_7月9日(连发程序v1.0.3绿色版下载)\Dnf连发工具.exe"
1⤵
PID:5064

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...