59b1208e99e9324f04ea6dfe47e8ee93c096d8a5a463a91932243be56e7bcfc5 | Triage

Analysis

max time kernel
41s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/12/2022, 22:59

Sharing

Report Analysis Logs

General

Target

59b1208e99e9324f04ea6dfe47e8ee93c096d8a5a463a91932243be56e7bcfc5.exe
Size

563KB
MD5

758f037c4d005da6f756bc7fdbaac3b0
SHA1

fbe7f15e3fda5e0c99ab890fa381c4a142a43374
SHA256

59b1208e99e9324f04ea6dfe47e8ee93c096d8a5a463a91932243be56e7bcfc5
SHA512

7ea12b00a7707b918cf7f48b8d58d663bedb55fb7324f7a9a47e2baaeafe88f6ab1cf0837c694384ede2d0483898139d9ced289eef6c04f3e01237cc39763b5d
SSDEEP

6144:VTgJ1PpXXRfdET30+BL3oKV3Fg4LpM/pa2Hduw1qVXyMP08L3ZtOab3nUXl1eXXq:1c1xXRfdQRjFDpMDuwAVEYptOab3jXuP

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\59b1208e99e9324f04ea6dfe47e8ee93c096d8a5a463a91932243be56e7bcfc5.exe
"C:\Users\Admin\AppData\Local\Temp\59b1208e99e9324f04ea6dfe47e8ee93c096d8a5a463a91932243be56e7bcfc5.exe"
1⤵
PID:552

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/552-54-0x0000000075131000-0x0000000075133000-memory.dmp

Filesize
8KB

Download