aeb07f5408e809e962fd038e5ebb601e4638551a79be5831566f72627ce1a3e2 | Triage

Analysis

max time kernel
33s
max time network
42s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 08:18

Sharing

Report Analysis Logs

General

Target

aeb07f5408e809e962fd038e5ebb601e4638551a79be5831566f72627ce1a3e2.exe
Size

1.2MB
MD5

b5945580f1c0273121e89f7b8a3bc4ae
SHA1

2b5c7a41c318d4f5c0138d9947183b834f18882a
SHA256

aeb07f5408e809e962fd038e5ebb601e4638551a79be5831566f72627ce1a3e2
SHA512

d5098fe96c4be55af57f46fe014edd21cdf6bdbcde526f3beaacca3561bb861b4f2f7f98a9d93c3b4af1f7823a9a842899a080f3c534b0d27b7d8ade082d16c9
SSDEEP

24576:rMk8nhMERv05pNXw82cDwiDInZKkY/+wFwWnZQ/+UPA0aC4UFxi:rMzhMo0hXwvcDfDInZKkaFwRPWCz7i

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\aeb07f5408e809e962fd038e5ebb601e4638551a79be5831566f72627ce1a3e2.exe
"C:\Users\Admin\AppData\Local\Temp\aeb07f5408e809e962fd038e5ebb601e4638551a79be5831566f72627ce1a3e2.exe"
1⤵
PID:784

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/784-54-0x0000000075FC1000-0x0000000075FC3000-memory.dmp

Filesize
8KB

Download