3e1fae3eff43b848e04bcaa764512aa3acc61da7a07b298bc083c6d176411ebd | Triage

Analysis

max time kernel
398s
max time network
428s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 15:51

Sharing

Report Analysis Logs

General

Target

3e1fae3eff43b848e04bcaa764512aa3acc61da7a07b298bc083c6d176411ebd.exe
Size

476KB
MD5

c6388f646fe4bd3b2083800ffdfeda75
SHA1

fd51a5391dc37c07b04502b79b99c506933b3417
SHA256

3e1fae3eff43b848e04bcaa764512aa3acc61da7a07b298bc083c6d176411ebd
SHA512

e4e0b290f2ad199defd24e93320199d7189b1af29fd31acc62a58a745fa9799e5967d04c84648650651c13e0ea98bbbfe6e98d3c5a3b870cd7486a31e05724c0
SSDEEP

12288:ZVumLCTluMyRk2SQVg/FMU4LbrzOhhrqm7:ZV8+RjhsF762hrqg

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3e1fae3eff43b848e04bcaa764512aa3acc61da7a07b298bc083c6d176411ebd.exe
"C:\Users\Admin\AppData\Local\Temp\3e1fae3eff43b848e04bcaa764512aa3acc61da7a07b298bc083c6d176411ebd.exe"
1⤵
PID:2132

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads