87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb | Triage

Analysis

max time kernel
10s
max time network
35s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
02/12/2022, 21:42

Sharing

Report Analysis Logs

General

Target

87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe
Size

889KB
MD5

cb85654e961d3626da57dbbf4019cde2
SHA1

022cdea4f664a5f0d7e910551f7b972765e10c26
SHA256

87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb
SHA512

05f584437b52d75e9dcb089f6b7f8927081601f2c8433f2fd8587a5dbe197405c7bac11c9fcb550ff6c78a97a8f1b0face51b7827ce366fc1194e4f199db9b0a
SSDEEP

24576:uRv5H3WYLiysdgZHm0luUKBCyKdszKeukot7slmt:chmU0adxlujBedszKBkodNt

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe
"C:\Users\Admin\AppData\Local\Temp\87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe"
1⤵
PID:2012

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2012-54-0x00000000760D1000-0x00000000760D3000-memory.dmp

Filesize
8KB

Download