9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5 | Triage

Analysis

max time kernel
60s
max time network
125s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
27/11/2022, 19:18

Sharing

Report Analysis Logs

General

Target

9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe
Size

214KB
MD5

c87075180a734456aaa9db13a0759d0a
SHA1

3dcba6e550417ffd5c78eed8306bb20f7a739ef4
SHA256

9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5
SHA512

78d7990e04adbaffa8d3a2eb2ae6641c9b75d6f0416104a42b401bb3495ddb9c9b2018e822bb22f0a4d395219c589810957a95bc6b8e953278b20dba655a7249
SSDEEP

3072:L1W3koFABSTdUc0X1gwntSffzCXOJl/afyyCv1ZXsJHLhQ0ErqLchDPmT2a3xfym:LI2udl55ffzC+Jw6y2ZXT0EYWPi3xfym

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe
"C:\Users\Admin\AppData\Local\Temp\9db90f1e0e42fbed77aa9103d5c1481717b84a52362f9c9daca6f93841b28ec5.exe"
1⤵
PID:3796

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads