adeaa8eef3fe093bdfc2f38554a4b9b0df60bbdb6b116ed8eb88cf73fe1d0011 | Triage

Analysis

max time kernel
41s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 11:52

Sharing

Report Analysis Logs

General

Target

adeaa8eef3fe093bdfc2f38554a4b9b0df60bbdb6b116ed8eb88cf73fe1d0011.exe
Size

110KB
MD5

a4c39f7097eb9c95c6731f1945e2ed54
SHA1

39cb5e545e5ffc02b9dc2c61bfff3cf7cefe0a93
SHA256

adeaa8eef3fe093bdfc2f38554a4b9b0df60bbdb6b116ed8eb88cf73fe1d0011
SHA512

42aeb54d46429022f6d447d078dc75d07a2edc4ba25bb135c747a09f5d989171c28b6e1f8485312ac56aeecc7b256fcc85a6561c6effbef6ebf9e49d3e0ba553
SSDEEP

1536:rPx/CJAmx2/W5Ebnto4tmJWpPVa41XyFn1br1iI6IqA8saWQKX1rMmQ:jx6UW6tpmJWpPVVlyFnFrIIUqaSqh

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\adeaa8eef3fe093bdfc2f38554a4b9b0df60bbdb6b116ed8eb88cf73fe1d0011.exe
"C:\Users\Admin\AppData\Local\Temp\adeaa8eef3fe093bdfc2f38554a4b9b0df60bbdb6b116ed8eb88cf73fe1d0011.exe"
1⤵
PID:940

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/940-54-0x00000000753F1000-0x00000000753F3000-memory.dmp

Filesize
8KB

Download