e0a8871c65aeb1c3e852a3535608234393ae3cf5a7ccbfe27ad4ae4fcdb7fe6d | Triage

Analysis

max time kernel
108s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 03:08

Sharing

Report Analysis Logs

General

Target

e0a8871c65aeb1c3e852a3535608234393ae3cf5a7ccbfe27ad4ae4fcdb7fe6d.exe
Size

67KB
MD5

627ca0ae031af5c70f881b29d7e26864
SHA1

2e886906cee5e17ebc3248ce407daa316146af72
SHA256

e0a8871c65aeb1c3e852a3535608234393ae3cf5a7ccbfe27ad4ae4fcdb7fe6d
SHA512

17e324951e75cf70cea0c884543bd4f00ddc93ec3793a30fffef0f1a9f7ca64ba30836ae4ce216d5547a974598a2c6a2740050f7366e9e858b9f58b4301e06ea
SSDEEP

1536:69daGW/HmWPe/pLRUr4G6e1U54FaU/tiZdDhWk4PahtXdUvvevtGL:YphxFUr4G6ev0/dWhPcdQvOtw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e0a8871c65aeb1c3e852a3535608234393ae3cf5a7ccbfe27ad4ae4fcdb7fe6d.exe
"C:\Users\Admin\AppData\Local\Temp\e0a8871c65aeb1c3e852a3535608234393ae3cf5a7ccbfe27ad4ae4fcdb7fe6d.exe"
1⤵
PID:2552

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads