d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0 | Triage

Analysis

max time kernel
152s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 18:44

Sharing

Report Analysis Logs

General

Target

d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0.asp
Size

76KB
MD5

4ce46e04f751fdf4d24fe5bbe13018f5
SHA1

ed54f595d4823feb6acaaed68f9785290b5f2632
SHA256

d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0
SHA512

8972cc4af17d477ceec99270b924754a4f1319fa028eb2b79deb95e6aebb7a33bdb8ae6bb894c6d052cefaeb3f49fa1bcfca54736a164365685ea4eee30d74e5
SSDEEP

1536:rvtJVMLSgqEgD3SJVcS+5+AHByZpx5yaocdsgq/1Zpejk7Bc8W1W1:rvbamgqz+Ajcf7ocdVq/13+k7BJW1W1

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\d58753717c48d30b15c9af05ef640c26d02aa552d11a439b181c49d985d084f0.asp
1⤵
PID:2688

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads