cbfea9244f8715e8d845650a28b96330e49d0bda76c3242e1cc5cbdd0962e773 | Triage

Analysis

max time kernel
15s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 14:27

Sharing

Report Analysis Logs

General

Target

cbfea9244f8715e8d845650a28b96330e49d0bda76c3242e1cc5cbdd0962e773.exe
Size

1.7MB
MD5

8da0e398ded56ddc1a808a0dc8fbab0a
SHA1

9a81f93869ec25427b41dfd45b709bff4987865f
SHA256

cbfea9244f8715e8d845650a28b96330e49d0bda76c3242e1cc5cbdd0962e773
SHA512

6d2b51d88fba584df0f3210eb9116c601e7575227200ba64cd7fb73152b0cf17be8b1770084d70ecabb461013607f86e496841f811457aa3b516101bcd69bd60
SSDEEP

24576:tQEwaVt1OslGap3am9Ail9HWVf4YglOVwaeN0JNnPx1XJ5zma:tQzktxlxpJWs+fmuw2D9R

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\cbfea9244f8715e8d845650a28b96330e49d0bda76c3242e1cc5cbdd0962e773.exe
"C:\Users\Admin\AppData\Local\Temp\cbfea9244f8715e8d845650a28b96330e49d0bda76c3242e1cc5cbdd0962e773.exe"
1⤵
PID:1232

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1232-54-0x0000000076041000-0x0000000076043000-memory.dmp

Filesize
8KB

Download