a15adfe1b10333a90c3697c28616fd1f5349081ed6c0ea979b5e6cefebdf16ab | Triage

Analysis

max time kernel
90s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 10:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

a15adfe1b10333a90c3697c28616fd1f5349081ed6c0ea979b5e6cefebdf16ab.exe
Size

1.7MB
MD5

365c14d8e4a7e33e0f02d39ace424aa7
SHA1

7f92154de7e33ca2a20fedfbf2c8d8ac87a8849c
SHA256

a15adfe1b10333a90c3697c28616fd1f5349081ed6c0ea979b5e6cefebdf16ab
SHA512

95a341b9eded720f95f33aa51ccfa23649992c4345891857835486f84f833aa57ea6cad7b79419274d985625445860b353239ab2ae5b89332c9dc02ce8a992f1
SSDEEP

49152:fzi2s06W3GT13/HVrENsY+ZZXWS9+rSFx72:fziE0/HV/Z4y1a

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\a15adfe1b10333a90c3697c28616fd1f5349081ed6c0ea979b5e6cefebdf16ab.exe
"C:\Users\Admin\AppData\Local\Temp\a15adfe1b10333a90c3697c28616fd1f5349081ed6c0ea979b5e6cefebdf16ab.exe"
1⤵
PID:4880

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads