9eaac7d972519493b29dc072285ae8d7559eaa9579f91e3ecaa425ce0e1d0739 | Triage

Analysis

max time kernel
151s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
21/12/2022, 18:26

Sharing

Report Analysis Logs

General

Target

9eaac7d972519493b29dc072285ae8d7559eaa9579f91e3ecaa425ce0e1d0739.exe
Size

18.5MB
MD5

1a01a7178d32064909ffb695b93b43ac
SHA1

67a0b1fab3ad466205cfabc19ae4a9fb26fcd86e
SHA256

9eaac7d972519493b29dc072285ae8d7559eaa9579f91e3ecaa425ce0e1d0739
SHA512

346f41711adff655b430e1d71444b60fdb9ad79b871944a9476a2f201fa2e95f1e80de1c97d2b05df4dd8bccafb37ec190d4da5d9199c1458ca6519c1fd8258f
SSDEEP

393216:z0LnlRA7va6q/G3/BRwOe/OfwykHGlbRdYdg7MhXa9KyYhsNG+jlI:z0LlaTa6q/G3pR7wGkUboy78AKyYhsNy

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\9eaac7d972519493b29dc072285ae8d7559eaa9579f91e3ecaa425ce0e1d0739.exe
"C:\Users\Admin\AppData\Local\Temp\9eaac7d972519493b29dc072285ae8d7559eaa9579f91e3ecaa425ce0e1d0739.exe"
1⤵
PID:4516

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads