d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0 | Triage

Analysis

max time kernel
47s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 18:44

Sharing

Report Analysis Logs

General

Target

d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0.asp
Size

76KB
MD5

4ce46e04f751fdf4d24fe5bbe13018f5
SHA1

ed54f595d4823feb6acaaed68f9785290b5f2632
SHA256

d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0
SHA512

8972cc4af17d477ceec99270b924754a4f1319fa028eb2b79deb95e6aebb7a33bdb8ae6bb894c6d052cefaeb3f49fa1bcfca54736a164365685ea4eee30d74e5
SSDEEP

1536:rvtJVMLSgqEgD3SJVcS+5+AHByZpx5yaocdsgq/1Zpejk7Bc8W1W1:rvbamgqz+Ajcf7ocdVq/13+k7BJW1W1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0.asp
1⤵
PID:1768

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1768-54-0x000007FEFC591000-0x000007FEFC593000-memory.dmp

Filesize
8KB

Download