9f72e57854df52db3d21d11ccc45a1f6cbdabf52f7aed7aeb06c968d8b1e38df | Triage

Analysis

max time kernel
149s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 08:21

Sharing

Report Analysis Logs

General

Target

9f72e57854df52db3d21d11ccc45a1f6cbdabf52f7aed7aeb06c968d8b1e38df.exe
Size

2.7MB
MD5

ed06c72f7ea51c7e7089a256273d98e6
SHA1

1bbb4b780fd47ac7076f35895986d7fdbe054883
SHA256

9f72e57854df52db3d21d11ccc45a1f6cbdabf52f7aed7aeb06c968d8b1e38df
SHA512

4ef0dd883f33e24be231b1d9425de4872baba19acd38bc645950ca479cf60a93675e31b76090dfc6a9c3e68a0b7117cb304a0119959b521216d3a1c11905c7da
SSDEEP

49152:3Z6xv7jOJ+GTGJ2wosYObQWpSSwZZqFJGdFe0dqQd45C0AuoQ/22xeuL3Hch9l4U:p6xmJ+yLTOso3JeFePQdiC0AuoQ+2DL0

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9f72e57854df52db3d21d11ccc45a1f6cbdabf52f7aed7aeb06c968d8b1e38df.exe
"C:\Users\Admin\AppData\Local\Temp\9f72e57854df52db3d21d11ccc45a1f6cbdabf52f7aed7aeb06c968d8b1e38df.exe"
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads