acdb5f97b53f6d2e6da412d488ec20b5ebb7e7937810921ae2bb852ae9410eef | Triage

Analysis

max time kernel
237s
max time network
337s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
03/12/2022, 18:39

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

acdb5f97b53f6d2e6da412d488ec20b5ebb7e7937810921ae2bb852ae9410eef.exe
Size

2.5MB
MD5

6ad6a7974114b063f7b5ac72b57b88f0
SHA1

0b40361dceb7f19aa1c5ea390d4ccd2edeb3a4d4
SHA256

acdb5f97b53f6d2e6da412d488ec20b5ebb7e7937810921ae2bb852ae9410eef
SHA512

1e93112e6f0da3808ca4da4d3a50314ed8da11c743a4079ab3f6ddb9c65b85873d17c4ebd22a1b904a242e68859ecb27d86a24925a2a9684e3f6d7cc228128c5
SSDEEP

49152:0vHxGrCHh9IjHYs6v4VjV+gxrAN9rTLmErLq7Cg59tk8Zu9nTfD4hvZU:0ZTMjHEih+9TrTLSCg5DDZulIq

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\acdb5f97b53f6d2e6da412d488ec20b5ebb7e7937810921ae2bb852ae9410eef.exe
"C:\Users\Admin\AppData\Local\Temp\acdb5f97b53f6d2e6da412d488ec20b5ebb7e7937810921ae2bb852ae9410eef.exe"
1⤵
PID:516

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/516-54-0x0000000075551000-0x0000000075553000-memory.dmp

Filesize
8KB

Download