c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d | Triage

Analysis

max time kernel
9s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
28-11-2022 01:14

Sharing

Report Analysis Logs

General

Target

c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe
Size

3.0MB
MD5

24c67606a1c0c5c218c9e79c6db7f6ed
SHA1

6226b2cb891115c3e4b638ef8f5d71825d528cca
SHA256

c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d
SHA512

64f05d98b3f9d22a07a4b3d7110baca3f2dc070e27533fe27fcb58103bbc802fda5314ae3bc72eef21d8336f01669c6ac91d33d07f7e472f5f0650c710e3bd0d
SSDEEP

49152:fjJDtBBVw6tbGT/LjveiMsQs6uqw9MxwrQk6Fav3maJrANSol5+kcAOE5s9DTsd3:VDRK21bMVoCmFtl5XXHAXg3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe
"C:\Users\Admin\AppData\Local\Temp\c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe"
1⤵
PID:1252

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1252-54-0x0000000076381000-0x0000000076383000-memory.dmp

Filesize
8KB

Download