d03d31ba410200020086e1bba0e26b8ba179e4adc74772f251c8ecaec83a788c | Triage

Analysis

max time kernel
22s
max time network
32s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
02-12-2022 22:07

Sharing

Report Analysis Logs

General

Target

d03d31ba410200020086e1bba0e26b8ba179e4adc74772f251c8ecaec83a788c.exe
Size

1.2MB
MD5

3a64d715c47b87473122e25a8cd4f1b1
SHA1

87559c0db1df3229f224520bfde83f71a1bd05a3
SHA256

d03d31ba410200020086e1bba0e26b8ba179e4adc74772f251c8ecaec83a788c
SHA512

46d33b4fca825b21961250d9a5d9241772ecafbd46b481a81b4ad63d700258b46b280f1164f3ff7f8388245b7e71cfa0de06bf27076c0d54a3b03f44608db874
SSDEEP

24576:fOT4UleeHjU8KIggLq40j2XdEf94FmY9eprrqN9Oy:fqpHjHRWAdV08oaN97

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d03d31ba410200020086e1bba0e26b8ba179e4adc74772f251c8ecaec83a788c.exe
"C:\Users\Admin\AppData\Local\Temp\d03d31ba410200020086e1bba0e26b8ba179e4adc74772f251c8ecaec83a788c.exe"
1⤵
PID:1432

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1432-54-0x0000000075C31000-0x0000000075C33000-memory.dmp

Filesize
8KB

Download