b92369617bd019bc3cee1f4369e9999ce7a7981e9eea9a7aa3dd1d85897df161 | Triage

Analysis

max time kernel
5s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 11:52

Sharing

Report Analysis Logs

General

Target

b92369617bd019bc3cee1f4369e9999ce7a7981e9eea9a7aa3dd1d85897df161.exe
Size

107KB
MD5

c9c13226000d08203f5d17e5d6573a30
SHA1

dc31eef2b2034b89fb7a224db3268f863f0dd3ba
SHA256

b92369617bd019bc3cee1f4369e9999ce7a7981e9eea9a7aa3dd1d85897df161
SHA512

5f4634a1ca4caa22ca204a213f8d91f97c1c2275f99ab5a7c9fea8e0848bc8fd5c7df27a5500b59fef1bd7a4bf844e11f395ed99bdd1aa35051d020154ed5b6e
SSDEEP

1536:5Px/CJAmx2/W5Ebnto4tmJk7k4txsgliQxOs1tteol3ALG2eVPHLim:Fx6UW6tpmJNgwQxOwteox6IPHem

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b92369617bd019bc3cee1f4369e9999ce7a7981e9eea9a7aa3dd1d85897df161.exe
"C:\Users\Admin\AppData\Local\Temp\b92369617bd019bc3cee1f4369e9999ce7a7981e9eea9a7aa3dd1d85897df161.exe"
1⤵
PID:1792

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1792-54-0x0000000076381000-0x0000000076383000-memory.dmp

Filesize
8KB

Download