f0206fa33d1be60792c51115fb33db71cdf1ea12a8e934067d3f5026fdbcc199 | Triage

Analysis

max time kernel
24s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 08:48

Sharing

Report Analysis Logs

General

Target

f0206fa33d1be60792c51115fb33db71cdf1ea12a8e934067d3f5026fdbcc199.exe
Size

75KB
MD5

12f325400aa0cb24671a6e82590f7bc0
SHA1

e92f1ea77414429ecf2262d17c4b86721f0fac1a
SHA256

f0206fa33d1be60792c51115fb33db71cdf1ea12a8e934067d3f5026fdbcc199
SHA512

a86eac34c88cb67d439b706d5d811f2a3dffe1ea86d3a7e376a79a92e4124ed9efbd4862d0b777a80bb9e80cbfc3474b53487825ce103438065343c696be0a91
SSDEEP

1536:UAhTyTTFQNC13U4rtnDb4tmJd1Dmire2EpFpJGS9yFhndA/KT1pw:ZhT2137DYmJd1iX2EHrGpPAKTjw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\f0206fa33d1be60792c51115fb33db71cdf1ea12a8e934067d3f5026fdbcc199.exe
"C:\Users\Admin\AppData\Local\Temp\f0206fa33d1be60792c51115fb33db71cdf1ea12a8e934067d3f5026fdbcc199.exe"
1⤵
PID:780

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/780-54-0x0000000076121000-0x0000000076123000-memory.dmp

Filesize
8KB

Download