Analysis
-
max time kernel
47s -
max time network
52s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
-
submitted
27/11/2022, 13:04
General
-
Target
3432f8859cb2f7084e14063d3876f46dd9239acefbe3b7e8cc6580c7c58d6f23.exe
-
Size
370KB
-
MD5
f9cc451014a57803edfaf0b14c0f4b6c
-
SHA1
7b71a15ad1351a418c59b6c7c3d8d8fcc668402b
-
SHA256
3432f8859cb2f7084e14063d3876f46dd9239acefbe3b7e8cc6580c7c58d6f23
-
SHA512
b0157917ee4df08d3becaf6b57daca047f64805620762c4a342d6ed407b980d80a21e77042227d0b2e94729693f4f25845db44ff54336ed71a97dadfc26eb11e
-
SSDEEP
6144:bY0/hhwqpzPca4Aazf6xrCBi+WQpdiD/tltylMyTDdaS7ij2ruLGk5fJKx7/RYhI:bbhwCzKQVQWMfBXos5t
Malware Config
Signatures
-
Drops startup file 1 IoCs
-
Loads dropped DLL 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3432f8859cb2f7084e14063d3876f46dd9239acefbe3b7e8cc6580c7c58d6f23.exe"C:\Users\Admin\AppData\Local\Temp\3432f8859cb2f7084e14063d3876f46dd9239acefbe3b7e8cc6580c7c58d6f23.exe"1⤵
- Drops startup file
- Loads dropped DLL
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
370KB
MD5f9cc451014a57803edfaf0b14c0f4b6c
SHA17b71a15ad1351a418c59b6c7c3d8d8fcc668402b
SHA2563432f8859cb2f7084e14063d3876f46dd9239acefbe3b7e8cc6580c7c58d6f23
SHA512b0157917ee4df08d3becaf6b57daca047f64805620762c4a342d6ed407b980d80a21e77042227d0b2e94729693f4f25845db44ff54336ed71a97dadfc26eb11e
-
Filesize
8KB
-
Filesize
176KB