cde74bc86974797537feff11f038281658216256eda15a017ba45d9cf61187ea | Triage

Analysis

max time kernel
39s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
29/11/2022, 11:10

Sharing

Report Analysis Logs

General

Target

cde74bc86974797537feff11f038281658216256eda15a017ba45d9cf61187ea.exe
Size

1.7MB
MD5

2d19f6e22ebc010a8f4dc9f0f5035713
SHA1

fb0b5d158e747c983cd3d30291f99c4564e8c19a
SHA256

cde74bc86974797537feff11f038281658216256eda15a017ba45d9cf61187ea
SHA512

48650bb119c5545befed7b98243ad42d2399adb629b559e03e7846fc66839a3e287fd3e21ddc00897c1bfe8b74b75b223b5155310b89c6a22a82ac2f2cf55a23
SSDEEP

49152:Kz8qi7t0TslAEHYAjqZWONeR1uOgIEIPJWzCBifm:uJOSTslNVgnNeRQRIEmJjie

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\cde74bc86974797537feff11f038281658216256eda15a017ba45d9cf61187ea.exe
"C:\Users\Admin\AppData\Local\Temp\cde74bc86974797537feff11f038281658216256eda15a017ba45d9cf61187ea.exe"
1⤵
PID:1148

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1148-54-0x0000000074C11000-0x0000000074C13000-memory.dmp

Filesize
8KB

Download