b1beb41822ffd7a85644f436444d9f5895d469499d6dcfc05aa23a326c0a328e | Triage

Analysis

max time kernel
14s
max time network
31s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 17:00

Sharing

Report Analysis Logs

General

Target

b1beb41822ffd7a85644f436444d9f5895d469499d6dcfc05aa23a326c0a328e.exe
Size

2.0MB
MD5

5d23516ec9f11af47c08c64ee53281d6
SHA1

7c28b52318eab337731fcda89b1e1647539c1985
SHA256

b1beb41822ffd7a85644f436444d9f5895d469499d6dcfc05aa23a326c0a328e
SHA512

a434f6b02084ed59060d9bf4997c42e1ac7ec3f8c0807d1aee068eba44a6dadfc658128d093763490a51087732a020b99f6bee7f140d7f414c146247160e3ffb
SSDEEP

49152:dqPuFGzCcot3LT6HyBIeNVoCXd1sx6Wul8HsmTcBPJ7p2:dqmFeot3HIeNXCY8HsPNp2

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b1beb41822ffd7a85644f436444d9f5895d469499d6dcfc05aa23a326c0a328e.exe
"C:\Users\Admin\AppData\Local\Temp\b1beb41822ffd7a85644f436444d9f5895d469499d6dcfc05aa23a326c0a328e.exe"
1⤵
PID:2028

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2028-54-0x00000000760B1000-0x00000000760B3000-memory.dmp

Filesize
8KB

Download