701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d

Analysis

max time kernel
379s
max time network
402s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 00:15

Target

701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe
Size

180KB
MD5

c05fdde4fbdb7bbad3447967e750e7ce
SHA1

1b808adaa0c972190f3608e1fba6abdb59e9f413
SHA256

701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d
SHA512

c938030c33bc73f315129a2e1291da21bc8111546874fa064531958d7ce96916ef5db55487fcd6e0c56d83d6b0e678438431054654f2e5c87b691626ca9f8813
SSDEEP

3072:TBAp5XhKpN4eOyVTGfhEClj8jTk+0hkf9FKaF/kWTMjX1:+bXE9OiTGfhEClq9Ff9kaFcWwjl

Score

4^/10

Drops file in Program Files directory 4 IoCs

description	ioc	Process
File opened for modification	C:\Program Files (x86)\v storonu\E230\ultar\Simplyenteryouremailaddress.vbs	701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe
File opened for modification	C:\Program Files (x86)\v storonu\E230\ultar\moskaraskakokokoko.hiq	701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe
File opened for modification	C:\Program Files (x86)\v storonu\E230\10\EcuadoryGalapagos.bat	701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe
File opened for modification	C:\Program Files (x86)\v storonu\E230\ultar\Latesttraveladvicefor.vbs	701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe
"C:\Users\Admin\AppData\Local\Temp\701e458639253c594bfb40f2c696ad4f867bae6e5ee20c491474d3c53b31a55d.exe"
1⤵
- Drops file in Program Files directory
PID:3556

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact