d4623e57dc5dd69802cc0a1323dd39fcb0aafb9516c952da7fba4f9d4b8a51c2 | Triage

Analysis

max time kernel
149s
max time network
161s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 21:37

Sharing

Report Analysis Logs

General

Target

d4623e57dc5dd69802cc0a1323dd39fcb0aafb9516c952da7fba4f9d4b8a51c2.exe
Size

109KB
MD5

db0ad0dc90f9e7dfb6de5ae934b2d809
SHA1

2ab466d68a69dea1ab473640622db65016ef33ac
SHA256

d4623e57dc5dd69802cc0a1323dd39fcb0aafb9516c952da7fba4f9d4b8a51c2
SHA512

64ce964259544d998ea5e005d511cc3e048cc031ef279a88992d00529b28285cc81dd17b747ec30abe95bab5cb6ddecbf8cdab3fd3482d40d4af51a0f76ed167
SSDEEP

1536:LPx/CJAmx2/W5Ebnto4tmJdvjLqBLKHjJR0FBiBlhUuKSSV3vbbdSFu2zT:Dx6UW6tpmJdryLcjJazUIuKSgTbdSRT

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\d4623e57dc5dd69802cc0a1323dd39fcb0aafb9516c952da7fba4f9d4b8a51c2.exe
"C:\Users\Admin\AppData\Local\Temp\d4623e57dc5dd69802cc0a1323dd39fcb0aafb9516c952da7fba4f9d4b8a51c2.exe"
1⤵
PID:800

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads