abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a | Triage

Analysis

max time kernel
32s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-11-2022 04:06

Sharing

Report Analysis Logs

General

Target

abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe
Size

161KB
MD5

009882e3abc9ca73702d7bd595df1c1b
SHA1

1b5525a9284f3aa80aa817673eda569f384332f4
SHA256

abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a
SHA512

d5baf2320b4de7fd3467bc8e8e33ee10b27e81c8e2e244229f51a09d5d60aa87aa735b6e6ad27b79c53df551c00860500aca67e344447e3999f2f95d48f651dd
SSDEEP

1536:9+aQc1w4vuFvJhEem+be0Dy6LtauashKELcVQMj1Ix86ryNFhf9Eoki7S:4a77v0JhE4Dy6LtauaIEhjs7Qv6

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe
"C:\Users\Admin\AppData\Local\Temp\abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe"
1⤵
PID:1976

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-54-0x00000000754E1000-0x00000000754E3000-memory.dmp

Filesize
8KB

Download