fd39e77d931a932e7ac5dac39d73c0ab0b532e9d844afd38333a77d593e49013 | Triage

Analysis

max time kernel
33s
max time network
41s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28-11-2022 02:47

Sharing

Report Analysis Logs

General

Target

fd39e77d931a932e7ac5dac39d73c0ab0b532e9d844afd38333a77d593e49013.exe
Size

208KB
MD5

1cfb7b20f26835dae480ada0359f62e0
SHA1

76da78bcc8a4710a45b984e439bd4a2ae149ab3e
SHA256

fd39e77d931a932e7ac5dac39d73c0ab0b532e9d844afd38333a77d593e49013
SHA512

d0ff46638423c541df1b6aef31ca51bdf415ea3795eb414066527566bf87aa652bb6ed1d91a90114116bb12ea621555b27ab966760d6644e28c2d32819af082c
SSDEEP

6144:NeTeM/ZHIzmQfb7eBB5J7I+3r4st3QprSwEhOT3:xMmzmQT7eXPrt3QBzEhw3

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fd39e77d931a932e7ac5dac39d73c0ab0b532e9d844afd38333a77d593e49013.exe
"C:\Users\Admin\AppData\Local\Temp\fd39e77d931a932e7ac5dac39d73c0ab0b532e9d844afd38333a77d593e49013.exe"
1⤵
PID:1384

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1384-54-0x0000000076701000-0x0000000076703000-memory.dmp

Filesize
8KB

Download