c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d | Triage

Analysis

max time kernel
91s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
28/11/2022, 01:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe
Size

3.0MB
MD5

24c67606a1c0c5c218c9e79c6db7f6ed
SHA1

6226b2cb891115c3e4b638ef8f5d71825d528cca
SHA256

c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d
SHA512

64f05d98b3f9d22a07a4b3d7110baca3f2dc070e27533fe27fcb58103bbc802fda5314ae3bc72eef21d8336f01669c6ac91d33d07f7e472f5f0650c710e3bd0d
SSDEEP

49152:fjJDtBBVw6tbGT/LjveiMsQs6uqw9MxwrQk6Fav3maJrANSol5+kcAOE5s9DTsd3:VDRK21bMVoCmFtl5XXHAXg3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe
"C:\Users\Admin\AppData\Local\Temp\c9d079565fb6c0b28d4c76be65246e0720b321e7e145b612743c863c9006369d.exe"
1⤵
PID:4712

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads