774a369fc0f50284c886f9d5d6740449e52956d175659af3ddab44e98d413f8f | Triage

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/11/2022, 00:43

Sharing

Report Analysis Logs

General

Target

774a369fc0f50284c886f9d5d6740449e52956d175659af3ddab44e98d413f8f.exe
Size

31.2MB
MD5

6b552766d8eef50852532a0a87ab56e9
SHA1

a296efc8e5233ecf00f2e6e9d61f7082f2abbe6a
SHA256

774a369fc0f50284c886f9d5d6740449e52956d175659af3ddab44e98d413f8f
SHA512

92bdcd67ec9753666e56477decdac5ad5f12ef269ba7b673b0f96e6804744e9911d65c9fd469bb1c3f86ea3ac51864a6a2fd463858352ab5a4cd6ed63b13d9ff
SSDEEP

786432:cJe8NjUjqbxcUf++hy+6Do34twSF3rLLGXrV21oR:cwQUjucy3MdrLLUVioR

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\774a369fc0f50284c886f9d5d6740449e52956d175659af3ddab44e98d413f8f.exe
"C:\Users\Admin\AppData\Local\Temp\774a369fc0f50284c886f9d5d6740449e52956d175659af3ddab44e98d413f8f.exe"
1⤵
PID:240

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/240-54-0x0000000075DA1000-0x0000000075DA3000-memory.dmp

Filesize
8KB

Download