434148cb396177c60f8591347b7b24fcd22bb5c1af5b792600a42a7604b127fb | Triage

Analysis

max time kernel
58s
max time network
81s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
29-11-2022 12:03

Sharing

Report Analysis Logs

General

Target

434148cb396177c60f8591347b7b24fcd22bb5c1af5b792600a42a7604b127fb.exe
Size

871KB
MD5

4e15b8ee0b8455e6974d4c5a65b58960
SHA1

604386199f3cc64d395441d8b8416d6da86bd68a
SHA256

434148cb396177c60f8591347b7b24fcd22bb5c1af5b792600a42a7604b127fb
SHA512

c988db2465aff8fc52b95eef4581807422f516794e1083759b6b1ef84a65fc5ff4f18ccc97fb3f22f6fbfb239aee318c90edf648bba7c5c27a121c8aba2193cd
SSDEEP

24576:BFw9tVW7kyLeXEs8Zrmd3grNEBlfkoJsW:3pkyLeXrdEErkS

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\434148cb396177c60f8591347b7b24fcd22bb5c1af5b792600a42a7604b127fb.exe
"C:\Users\Admin\AppData\Local\Temp\434148cb396177c60f8591347b7b24fcd22bb5c1af5b792600a42a7604b127fb.exe"
1⤵
PID:1196

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1196-54-0x0000000075F21000-0x0000000075F23000-memory.dmp

Filesize
8KB

Download