e8baf74b33cfda803f5b211757e6451644ab231cb404209def9cbdabeb3fcee2 | Triage

Analysis

max time kernel
239s
max time network
336s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 13:52

Sharing

Report Analysis Logs

General

Target

e8baf74b33cfda803f5b211757e6451644ab231cb404209def9cbdabeb3fcee2.exe
Size

9KB
MD5

99e3350d7e1961614bdd831fb8446534
SHA1

5979f1616463a88e7d7e7b8392c6dde06fddfce4
SHA256

e8baf74b33cfda803f5b211757e6451644ab231cb404209def9cbdabeb3fcee2
SHA512

61234837df6811a71f0beadb6868e3d28dd864437b3c6b5f665c1f9f7204ec1b5e72440f5f9d5461867e60ad94c261debc204ab39dd88701bce325116ba74801
SSDEEP

192:OKSl0vTnD+dHX7lBkIdPGsL2rhAiHXYO1545i/p4bw:OcvbcrlugTW4k4bw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e8baf74b33cfda803f5b211757e6451644ab231cb404209def9cbdabeb3fcee2.exe
"C:\Users\Admin\AppData\Local\Temp\e8baf74b33cfda803f5b211757e6451644ab231cb404209def9cbdabeb3fcee2.exe"
1⤵
PID:1516

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1516-54-0x0000000075671000-0x0000000075673000-memory.dmp

Filesize
8KB

Download