6c54d3f2c3c49b7d108617d301518e0943e22842512acabea7aadcc27ddafd52 | Triage

Analysis

max time kernel
26s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 18:24

Sharing

Report Analysis Logs

General

Target

6c54d3f2c3c49b7d108617d301518e0943e22842512acabea7aadcc27ddafd52.exe
Size

14.1MB
MD5

5eb2d293c60eefdb1c1c769de8c15a05
SHA1

da18a950ccfbe7dcb9e98a57be7c58d66fad3dd1
SHA256

6c54d3f2c3c49b7d108617d301518e0943e22842512acabea7aadcc27ddafd52
SHA512

ab680df187a95469c5e80efff44817b7ca273d25de76acf4cbc2168c08545f63205395254e75682e5e0b58b03f4ab673f8d1a038e1d004bef2aede32cda01a55
SSDEEP

393216:8qqdnIipT+VVbZ7ViUMFsq6i/CUscffHwnRUyuepl32x:8q8HpT+VVdRmui/m4HEqyfl4

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\6c54d3f2c3c49b7d108617d301518e0943e22842512acabea7aadcc27ddafd52.exe
"C:\Users\Admin\AppData\Local\Temp\6c54d3f2c3c49b7d108617d301518e0943e22842512acabea7aadcc27ddafd52.exe"
1⤵
PID:2032

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2032-54-0x0000000075201000-0x0000000075203000-memory.dmp

Filesize
8KB

Download