fd4e29775e14c071e6f3d34e3f0b42d7ac0599a10f9936128ab0bd1e13b4452e | Triage

Analysis

max time kernel
40s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03-12-2022 05:37

Sharing

Report Analysis Logs

General

Target

fd4e29775e14c071e6f3d34e3f0b42d7ac0599a10f9936128ab0bd1e13b4452e.exe
Size

106KB
MD5

dd24f8094382046a74898779bfa6d759
SHA1

c259b7f9eb3936cedf6a1b00784ab745ad15f4eb
SHA256

fd4e29775e14c071e6f3d34e3f0b42d7ac0599a10f9936128ab0bd1e13b4452e
SHA512

f3fb392e7e167e92d34a1427d7f5379845152967c57d5e091c37e3faf8b05d7ea827140758d03aa0fa0b0dc5b991dfa77e76fb3c5d86cd88b6ac9c9987eb693e
SSDEEP

1536:5Px/CJAmx2/W5Ebnto4tmJPo522Sie1VWyc/k7gQz/W11TlahEpvfFjsCREKQOB:Fx6UW6tpmJQ522Dkg021x9s0L

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\fd4e29775e14c071e6f3d34e3f0b42d7ac0599a10f9936128ab0bd1e13b4452e.exe
"C:\Users\Admin\AppData\Local\Temp\fd4e29775e14c071e6f3d34e3f0b42d7ac0599a10f9936128ab0bd1e13b4452e.exe"
1⤵
PID:1968

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1968-54-0x0000000074AB1000-0x0000000074AB3000-memory.dmp

Filesize
8KB

Download