a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f | Triage

Analysis

max time kernel
46s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 00:10

Sharing

Report Analysis Logs

General

Target

a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe
Size

4.0MB
MD5

b3dd813106729b6f99c66c338423da77
SHA1

dbf707f4890f025ce75b44a7110914a9bed6c514
SHA256

a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f
SHA512

a9c131ed67432ec7dbee86b4910effd7bcf72811b160f6b56ca278aa266d61a39b4d3fe12fce62dde49d673de22b2ab56c1307bc9bea2c54e4c5d6ecb50a23ed
SSDEEP

98304:bD0mA20c/x7TSL0Wt9KvW8lAm4rK2yb9RS6xVa9b64Eb1MLda9Zw8H5:bD3z0mBTutcOSAm4rcb9da9bTY1px5

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe
"C:\Users\Admin\AppData\Local\Temp\a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe"
1⤵
PID:1204

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-54-0x0000000074DE1000-0x0000000074DE3000-memory.dmp

Filesize
8KB

Download