7f8e436ecc87061a3ffe3ef90652e46fd822b968d6bf5a3955c48c21f550d7c6 | Triage

Analysis

max time kernel
150s
max time network
162s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 15:27

Sharing

Report Analysis Logs

General

Target

7f8e436ecc87061a3ffe3ef90652e46fd822b968d6bf5a3955c48c21f550d7c6.asp
Size

20KB
MD5

18e6efc786caee0501d514cff8b0a89d
SHA1

a927410843ea65513cab341b2fee59cd6f079ed4
SHA256

7f8e436ecc87061a3ffe3ef90652e46fd822b968d6bf5a3955c48c21f550d7c6
SHA512

a6b4c066866b863228b05e731fb1a74ea58f07fae7efa1df6118d4c242fa5bfb95dcc4abff981f7e65833eebd9f16c3db88acbf4058b3cac9e7861ffc81f8361
SSDEEP

192:nIxkd53GPZJf3CF0Vl6nfvBrwUHJarUHRCkJqJB2wNk:nIxTPdl6nCsGewNk

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\7f8e436ecc87061a3ffe3ef90652e46fd822b968d6bf5a3955c48c21f550d7c6.asp
1⤵
PID:4756

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads