Analysis
-
max time kernel
39s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
01/12/2022, 21:32
General
-
Target
558c18670fdb59df8decf6b9992cd9625fedc74cb3633bbcb3ed2319177138d9.exe
-
Size
680KB
-
MD5
f1694b4a0ee7c3fd5606392171004779
-
SHA1
50db41213925c49ad74d835fa0981a1594d9ee4d
-
SHA256
558c18670fdb59df8decf6b9992cd9625fedc74cb3633bbcb3ed2319177138d9
-
SHA512
ea23a97e775ed47f7a1eba5f029ff8f8cb95b5d68d3bdf2d58dd17b04e8a9bb6bdd19d23b7ba887cefcda3a4d13db7acd766d00370c6b3cba736df6adc634e8d
-
SSDEEP
12288:gMzvHWqCvdrJFyQnxe4EfTIhPc/QIOYtmb95ExRu15sRbdrKdLJbO:SqWJbxUf8GF9sb95L15AdGrbO
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Drops file in Program Files directory 3 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\558c18670fdb59df8decf6b9992cd9625fedc74cb3633bbcb3ed2319177138d9.exe"C:\Users\Admin\AppData\Local\Temp\558c18670fdb59df8decf6b9992cd9625fedc74cb3633bbcb3ed2319177138d9.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.5MB
MD55cde5a5e6ad2b814169610d2bc4a7314
SHA1743505dd36f404290dbdb2c30ffb7e28184ecd89
SHA2564084d10c27762f4eddeab6d0e84e025fd4da2883efb6b43d3a277ddd7cfd2e64
SHA51297bb7658de6a0b84c548b370eda80a42f82825b36d77b59e361223090a9f290afa8956294cf96b0a6e0b422cbbe78232714dc36769e942ac44b2a68078fde1c2
-
Filesize
1.5MB
MD55cde5a5e6ad2b814169610d2bc4a7314
SHA1743505dd36f404290dbdb2c30ffb7e28184ecd89
SHA2564084d10c27762f4eddeab6d0e84e025fd4da2883efb6b43d3a277ddd7cfd2e64
SHA51297bb7658de6a0b84c548b370eda80a42f82825b36d77b59e361223090a9f290afa8956294cf96b0a6e0b422cbbe78232714dc36769e942ac44b2a68078fde1c2
-
Filesize
8KB