e6d0cb329f9ad6f6e4fe449d85da4dcec7a2200b5217629e6406503256d6e587 | Triage

Analysis

max time kernel
46s
max time network
51s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 05:37

Sharing

Report Analysis Logs

General

Target

e6d0cb329f9ad6f6e4fe449d85da4dcec7a2200b5217629e6406503256d6e587.exe
Size

100KB
MD5

d6d9499aa473e95af02ad150b28b2432
SHA1

09325fe3e41f75e3371bc1c6d9fa3c44c1f4c48f
SHA256

e6d0cb329f9ad6f6e4fe449d85da4dcec7a2200b5217629e6406503256d6e587
SHA512

2be7b55011b832519fbc36e11f283425c859e478d359ea1719b90894beef27ad3217b86fed393ec9af493181acfac2355e1be691db9a4f6d64c7e38b3773c045
SSDEEP

1536:NPx/CJAmx2/W5Ebnto4tmJ/D2OQZP+Ht9kgY/g7sDCf8ELRGyjgMrC/:5x6UW6tpmJ/yX+HggYNuf8ELfjgOC/

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e6d0cb329f9ad6f6e4fe449d85da4dcec7a2200b5217629e6406503256d6e587.exe
"C:\Users\Admin\AppData\Local\Temp\e6d0cb329f9ad6f6e4fe449d85da4dcec7a2200b5217629e6406503256d6e587.exe"
1⤵
PID:1308

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1308-54-0x0000000074DA1000-0x0000000074DA3000-memory.dmp

Filesize
8KB

Download