aeffe908923b65b05aa1840bfdb5c0acd1afcdd502f4be1b3c8fbb5ac20f3a4e | Triage

Analysis

max time kernel
45s
max time network
49s
platform
windows7_x64
resource
win7-20220901-en
resource tags

arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 05:40

Sharing

Report Analysis Logs

General

Target

aeffe908923b65b05aa1840bfdb5c0acd1afcdd502f4be1b3c8fbb5ac20f3a4e.exe
Size

109KB
MD5

f9eb5c62ce471820bac6632b2bd46988
SHA1

98ef05bcb04a0fa7a3ea945106f275fa39530402
SHA256

aeffe908923b65b05aa1840bfdb5c0acd1afcdd502f4be1b3c8fbb5ac20f3a4e
SHA512

a743fc59eb6a38941b2eccfb71d825522e181939ce4af2f22c74baf457c3abd4b5e7735c6f7503d923ca7074bb537516f96c69f2883a76f3f833f5d190503f8f
SSDEEP

1536:TPx/CJAmx2/W5Ebnto4tmJON0lUIgGN0VdQTfN0jgVwvRT10uqKnyG1HsmDi2:7x6UW6tpmJON4UIgGNJDN1VwyG1H22

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\aeffe908923b65b05aa1840bfdb5c0acd1afcdd502f4be1b3c8fbb5ac20f3a4e.exe
"C:\Users\Admin\AppData\Local\Temp\aeffe908923b65b05aa1840bfdb5c0acd1afcdd502f4be1b3c8fbb5ac20f3a4e.exe"
1⤵
PID:1064

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1064-54-0x0000000075BB1000-0x0000000075BB3000-memory.dmp

Filesize
8KB

Download