592049341e13fe9d93198e4b69ff988b9ec329d13054fa635b60bb4211704db6 | Triage

Analysis

max time kernel
12s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
02/12/2022, 18:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

592049341e13fe9d93198e4b69ff988b9ec329d13054fa635b60bb4211704db6.exe
Size

349KB
MD5

32c9176d2f8e942fe4939cf2812b7d57
SHA1

9f35d6cdd43627908d059be8872e03b4a32ebe01
SHA256

592049341e13fe9d93198e4b69ff988b9ec329d13054fa635b60bb4211704db6
SHA512

cc2998257196941373f03e4a15f8b2ecb218fe623856cde3858ddf186571b4556e71a7906e964f0797df185940c70776faca0c50cc764ed3e8ecf8a1536d0138
SSDEEP

6144:Wb6nTTUUNigbK3v4X/aQHZhBGz5C7/LTGcPZcWNNZxPQAkYkx:muT4UN3K3vwlhs5C7TTJZBZprkx

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\592049341e13fe9d93198e4b69ff988b9ec329d13054fa635b60bb4211704db6.exe
"C:\Users\Admin\AppData\Local\Temp\592049341e13fe9d93198e4b69ff988b9ec329d13054fa635b60bb4211704db6.exe"
1⤵
PID:1188

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1188-54-0x0000000075091000-0x0000000075093000-memory.dmp

Filesize
8KB

Download