e7ac6652d9d3a265dff4847153f90ff0fc98d42e25d6958a995061470fc9f93e | Triage

Analysis

max time kernel
39s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 19:50

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

e7ac6652d9d3a265dff4847153f90ff0fc98d42e25d6958a995061470fc9f93e.exe
Size

2.2MB
MD5

c6a5df4aab0e49027b8c778c7051f123
SHA1

c862a8540a12320e880001523c6d732fab7f8a7c
SHA256

e7ac6652d9d3a265dff4847153f90ff0fc98d42e25d6958a995061470fc9f93e
SHA512

476f3173eafc62c3a37b097ec6191b90d4928f5f4311e196b91e0fc38fad94f84c94e4122b550cce9e4b2e07fc7f17e2c676810b75e4eff382ba9455b6f22c24
SSDEEP

49152:j/ILLQ/rgSY2cacxVsu40MCvBtOQySksGdTNwW0yuVVRMoDf9pB3vZVTc9EEEEEG:G8gSYXassu403BtOQySGdT/WVVRMKf9g

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e7ac6652d9d3a265dff4847153f90ff0fc98d42e25d6958a995061470fc9f93e.exe
"C:\Users\Admin\AppData\Local\Temp\e7ac6652d9d3a265dff4847153f90ff0fc98d42e25d6958a995061470fc9f93e.exe"
1⤵
PID:1676

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1676-54-0x0000000074C91000-0x0000000074C93000-memory.dmp

Filesize
8KB

Download