8ae74a60dbac3917548e09099b55065dc3a193743d8479f80295d919d69518c1 | Triage

Analysis

max time kernel
90s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 15:18

Sharing

Report Analysis Logs

General

Target

8ae74a60dbac3917548e09099b55065dc3a193743d8479f80295d919d69518c1.exe
Size

4.4MB
MD5

8982c849f2ec5743b06dd2ce3e6f05b3
SHA1

32ad6533c3533d0c737924dd318c78827c652bbc
SHA256

8ae74a60dbac3917548e09099b55065dc3a193743d8479f80295d919d69518c1
SHA512

9f38681e9ba8d84d24256f25b4b5a3860f577c472443b437e75bedaccb0abb43a393abba19539296d67ba045f2de65ee2f42f66f1aae7ceb67256c8635bb050b
SSDEEP

98304:tNdFo45LBm4xgkkz1FhVDnRzhF22iA6V+vUv+znUMl:t7PSpz1FhVDnGV+vUGl

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\8ae74a60dbac3917548e09099b55065dc3a193743d8479f80295d919d69518c1.exe
"C:\Users\Admin\AppData\Local\Temp\8ae74a60dbac3917548e09099b55065dc3a193743d8479f80295d919d69518c1.exe"
1⤵
PID:5060

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads