acea17cb4d9b31e01e825a17b1b341533fcb6368171741abbe10559d4eb54ef7 | Triage

Analysis

max time kernel
38s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
28/11/2022, 07:21

Sharing

Report Analysis Logs

General

Target

acea17cb4d9b31e01e825a17b1b341533fcb6368171741abbe10559d4eb54ef7.exe
Size

191KB
MD5

1325ec3bfcad26d83648e880e09efe69
SHA1

d800ddb83a495e1f7209cc9a40e6495beb4322cf
SHA256

acea17cb4d9b31e01e825a17b1b341533fcb6368171741abbe10559d4eb54ef7
SHA512

8ebaa32e1de90ed92ca99066f0675d4db329653a4ad7af7542e2b311913022b9fcc6fc2309ee295f0e63fad980f40a82c43ebddfcd205c5993036c3a7d027244
SSDEEP

3072:HADWbKzKbQmSVdSme+xmJyD4BliqzsmmEpEmboQd+ccewkyeZyYPuvGCJ30EZ0d4:HAVySV1eY4k437d+4wkTHdS2Q

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\acea17cb4d9b31e01e825a17b1b341533fcb6368171741abbe10559d4eb54ef7.exe
"C:\Users\Admin\AppData\Local\Temp\acea17cb4d9b31e01e825a17b1b341533fcb6368171741abbe10559d4eb54ef7.exe"
1⤵
PID:1508

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1508-54-0x0000000075451000-0x0000000075453000-memory.dmp

Filesize
8KB

Download