834ac258559fda69db606ad937c0915ed36ed4bcf2bbb1aba356b2b84432acaa | Triage

Analysis

max time kernel
147s
max time network
166s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
05/12/2022, 06:47

Sharing

Report Analysis Logs

General

Target

834ac258559fda69db606ad937c0915ed36ed4bcf2bbb1aba356b2b84432acaa.exe
Size

783KB
MD5

c898b0ec2e0271bebc95649f5fa5ed7c
SHA1

9858b3ea2f16bd158b22fe5653d369a4845ed685
SHA256

834ac258559fda69db606ad937c0915ed36ed4bcf2bbb1aba356b2b84432acaa
SHA512

fc83d2468c57f0ae667c50cc34d5b59514d8d09f3494d98628d4473ed6bcd2fde9d793e7601daaf584e173626b07e1dbcd4f5b41e0aa99d51c033d1056b5511a
SSDEEP

24576:54VrnCYn6wHuUHBr00vv/X/hWPLO2zMkY8ZCd+Y8W:qF7kUHRHAPBM9Ld+Yb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\834ac258559fda69db606ad937c0915ed36ed4bcf2bbb1aba356b2b84432acaa.exe
"C:\Users\Admin\AppData\Local\Temp\834ac258559fda69db606ad937c0915ed36ed4bcf2bbb1aba356b2b84432acaa.exe"
1⤵
PID:944

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads