55e98763c1049d68ccbb8ad920093fa17a557f28115f5c418767064b9df6803a | Triage

Analysis

max time kernel
40s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 09:34

Sharing

Report Analysis Logs

General

Target

55e98763c1049d68ccbb8ad920093fa17a557f28115f5c418767064b9df6803a.exe
Size

4.7MB
MD5

15fcc655c60acd02b8fe06a3ce51cb53
SHA1

579befc3f7cf6eb4d99580adb8e6490adb14f051
SHA256

55e98763c1049d68ccbb8ad920093fa17a557f28115f5c418767064b9df6803a
SHA512

f8cc6747896e43d5dca6d87d9360f3b2ee0cb48672e72081c1976a4b1aea7673db5f745b798efc34c8893deb0dff0a57919adda13b57f2be921e91d5463cd1f2
SSDEEP

98304:IPbGgEinw/EylgQQhn1pDDirv4DE019ddq74xYRNv/bq0uQTPQR3sT/:4KtinwNeQWbObP0zddCL1q0u8PIG

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\55e98763c1049d68ccbb8ad920093fa17a557f28115f5c418767064b9df6803a.exe
"C:\Users\Admin\AppData\Local\Temp\55e98763c1049d68ccbb8ad920093fa17a557f28115f5c418767064b9df6803a.exe"
1⤵
PID:360

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/360-54-0x0000000075771000-0x0000000075773000-memory.dmp

Filesize
8KB

Download