7d38396dfa87d7bdf67fc60c77d1434b3281dc0b2336a226b38f431122d68b60 | Triage

Analysis

max time kernel
123s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
02-12-2022 01:15

Sharing

Report Analysis Logs

General

Target

7d38396dfa87d7bdf67fc60c77d1434b3281dc0b2336a226b38f431122d68b60.exe
Size

609KB
MD5

7690973fde3b28f8b8138a8d5a14c0ab
SHA1

1f3b2248a7d715e9d5b0110780e9632e3ff7a43c
SHA256

7d38396dfa87d7bdf67fc60c77d1434b3281dc0b2336a226b38f431122d68b60
SHA512

b8035286c29bb869e7466a54c139846c71d438d065cab813a920e77131277509134075f4a7b49fb369cd47ca33ede677b0d8eb26065e497a3d57768cb08e5b36
SSDEEP

12288:+Mx12w1/ypWroSOI500ZJ2RG/5VYlYsbVMiStdrbcFSFW3hNDlaeH6ULaV2gTNzL:+M/F/maOI500Z8WsHcdrbiSFIhN5pHFQ

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\7d38396dfa87d7bdf67fc60c77d1434b3281dc0b2336a226b38f431122d68b60.exe
"C:\Users\Admin\AppData\Local\Temp\7d38396dfa87d7bdf67fc60c77d1434b3281dc0b2336a226b38f431122d68b60.exe"
1⤵
PID:5056

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads