b773b905fe4b69afef2c8b8fe815bbcbd8479186fe20c98f02690569c2448a6e | Triage

Analysis

max time kernel
9s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
29-11-2022 11:27

Sharing

Report Analysis Logs

General

Target

b773b905fe4b69afef2c8b8fe815bbcbd8479186fe20c98f02690569c2448a6e.exe
Size

100KB
MD5

803eaa0ed8980f3be2d3c147cb2600c2
SHA1

e2c4ff7945da3de598fa7ce2b9daf3549c9c1ba4
SHA256

b773b905fe4b69afef2c8b8fe815bbcbd8479186fe20c98f02690569c2448a6e
SHA512

9d1e51fc3fcd47b7957376eb5d0e966ab56cb40dd0920a87a856e88e3b3d6dbaa51b6c4838b9f636daaf9721b8bab1e18f69a6fc74be09e1aa73032a9da6e5ce
SSDEEP

3072:EmeDmBqskJflIMhCu1hYQlp7qqq/78imWAW:E8ju1hnpc+WAW

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b773b905fe4b69afef2c8b8fe815bbcbd8479186fe20c98f02690569c2448a6e.exe
"C:\Users\Admin\AppData\Local\Temp\b773b905fe4b69afef2c8b8fe815bbcbd8479186fe20c98f02690569c2448a6e.exe"
1⤵
PID:1352

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1352-54-0x0000000075931000-0x0000000075933000-memory.dmp

Filesize
8KB

Download