b9d4b059317a58a55de16a64c911ad901968e54bb33b45be228baab196009805 | Triage

Analysis

max time kernel
234s
max time network
333s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 07:55 UTC

Sharing

Report Analysis Logs

General

Target

b9d4b059317a58a55de16a64c911ad901968e54bb33b45be228baab196009805.exe
Size

1.5MB
MD5

da26197944debcae66569d5bf1111455
SHA1

3cc922510d78f0e132e281b9aa4d4d7b1550ada9
SHA256

b9d4b059317a58a55de16a64c911ad901968e54bb33b45be228baab196009805
SHA512

5230362e16361a2ff3633d6e44f9175617d7b9a255c9839708c8abbf21bdfd99c86c82e7d1582b9198fcd7dda8e911c614c5217f2b968d082ed2c1f700be9f01
SSDEEP

24576:sadgqsmZWHw11P5IV/tzAG6IU3Xd9FiRrzdxHv1WrKZlV90YPvoQ2q1PuLUcFeIz:/jKw1YV/9ASUrFW3XP6aV9rdZGolIKLe

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\b9d4b059317a58a55de16a64c911ad901968e54bb33b45be228baab196009805.exe
"C:\Users\Admin\AppData\Local\Temp\b9d4b059317a58a55de16a64c911ad901968e54bb33b45be228baab196009805.exe"
1⤵
PID:1044

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1044-54-0x0000000076931000-0x0000000076933000-memory.dmp

Filesize
8KB

Download