eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47 | Triage

Analysis

max time kernel
113s
max time network
153s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-12-2022 07:23

Sharing

Report Analysis Logs

General

Target

eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe
Size

163KB
MD5

2caf545f331f5b9ba6625bd80aaced8d
SHA1

991cbb1f3c223574dff056264f00763b7c56f70b
SHA256

eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47
SHA512

8605df3cc16feb9ef42b70ad271309427af2bb9262581acfca3579b66838320acf7ad6cc8b6d5618e7eec086145bab77c82a23f59ee67f5991e5134431f6ae06
SSDEEP

3072:eERoVr9t04qX86NAISoF0TQDzZ+jO0t+0FhG0ADQFKmVlOrOoPY:A04B6L1O+d2t+AblsmrOCoPY

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe
"C:\Users\Admin\AppData\Local\Temp\eadc2ba740ac0a79b731e2e0237cab01d0fadf69ce7d689a4f0317fd38b60e47.exe"
1⤵
PID:4260

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4260-132-0x0000000000400000-0x00000000007AA000-memory.dmp

Filesize
3.7MB

Download
memory/4260-133-0x0000000000400000-0x00000000007AA000-memory.dmp

Filesize
3.7MB

Download