b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605 | Triage

Analysis

max time kernel
15s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 00:10

Sharing

Report Analysis Logs

General

Target

b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe
Size

3.0MB
MD5

4c53a7cfaaeed8384213d2b150a74438
SHA1

5cbd35badf3142bf59d62d99c88b40fa0f400b3f
SHA256

b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605
SHA512

9b92552464371f97a3c2aa55ba7ab325f9a95bcc2703929e5a4c9e40ba0479bde922ca477a1b5ee0f0fd9bfa5ffc2682b28286b0a76a29325456f6f22a47a5a0
SSDEEP

49152:KruR0auxftp+MuQF19MhjYmcS6skDipTR8hOrvuFn6+YudUZ:uf9wMuyMeA61hOr2F6+NeZ

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe
"C:\Users\Admin\AppData\Local\Temp\b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe"
1⤵
PID:2028

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2028-54-0x0000000076651000-0x0000000076653000-memory.dmp

Filesize
8KB

Download