7dc5ffef84c27919bfa9e656e8fc301de3e2cb55d801469da219a97f579bdfa2 | Triage

Analysis

max time kernel
58s
max time network
34s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/12/2022, 20:26

Sharing

Report Analysis Logs

General

Target

7dc5ffef84c27919bfa9e656e8fc301de3e2cb55d801469da219a97f579bdfa2.exe
Size

2.9MB
MD5

c4b173dedeab0d08017129ef117de712
SHA1

e7b20dd327d9c13e3a1a5e66c2d62e5d9b15b8e3
SHA256

7dc5ffef84c27919bfa9e656e8fc301de3e2cb55d801469da219a97f579bdfa2
SHA512

d6298f3448dc6db97e80ce4c6f487197f2b56218d97d669c01456688da8a12693775e44bef7d2a27fb1a2c63b59e437042a4add6328ab17e16f6b7076a3d9a33
SSDEEP

49152:/DZqCgICMSOHYHL2VKkJbXUsTjXzcdUj3rE8MVqwwy2AoCyDkU1+X75vGN6IfYE8:rZqCgIChydQsTNY5Vqjy2AoaVpqYE4x

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\7dc5ffef84c27919bfa9e656e8fc301de3e2cb55d801469da219a97f579bdfa2.exe
"C:\Users\Admin\AppData\Local\Temp\7dc5ffef84c27919bfa9e656e8fc301de3e2cb55d801469da219a97f579bdfa2.exe"
1⤵
PID:1332

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1332-54-0x0000000074FD1000-0x0000000074FD3000-memory.dmp

Filesize
8KB

Download