8e6c8dbdfe76ba9a7147480390441b7417ad8fdc04f8c88b1e0a7ea6f0096aac | Triage

Analysis

max time kernel
25s
max time network
33s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
05/12/2022, 21:14

Sharing

Report Analysis Logs

General

Target

8e6c8dbdfe76ba9a7147480390441b7417ad8fdc04f8c88b1e0a7ea6f0096aac.exe
Size

10.7MB
MD5

ae3040a21b4dee5fd30e8ad18449c0dc
SHA1

acc9315c044070a20906929db858d364a6fcf1d4
SHA256

8e6c8dbdfe76ba9a7147480390441b7417ad8fdc04f8c88b1e0a7ea6f0096aac
SHA512

20dfdf97b276d99643836d00cad418235de031df08b7298e7e11da109f8d77a4ea438caaa7c968880686b523b984dbd4e2461fe4f6fccbbef6d40471e7e5d4c1
SSDEEP

196608:aIRyfv0xCMa9z0G9Nd5IBwbvU5wJKgCIbZmCFQ70QFBjLADU7zitS4ZVBWt5P4:aIRYv0C08MyDBJKgCEZ8AA3+ZfWs

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\8e6c8dbdfe76ba9a7147480390441b7417ad8fdc04f8c88b1e0a7ea6f0096aac.exe
"C:\Users\Admin\AppData\Local\Temp\8e6c8dbdfe76ba9a7147480390441b7417ad8fdc04f8c88b1e0a7ea6f0096aac.exe"
1⤵
PID:1484

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1484-54-0x0000000074F01000-0x0000000074F03000-memory.dmp

Filesize
8KB

Download