3df41da2b3a1a7ddea8e68c4ed16a4b30d5a012fcccedb8211cab17151e678d1 | Triage

Analysis

max time kernel
91s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
23/12/2022, 18:49

Sharing

Report Analysis Logs

General

Target

3df41da2b3a1a7ddea8e68c4ed16a4b30d5a012fcccedb8211cab17151e678d1.exe
Size

2.0MB
MD5

612d9e9847cff8b59d937a2415f9b123
SHA1

7801d79c313f4d47406e6c1a3df209b9623d8840
SHA256

3df41da2b3a1a7ddea8e68c4ed16a4b30d5a012fcccedb8211cab17151e678d1
SHA512

236770aaf2a1647d2d62d3b61ad796b4619a70ba36c3758344a62f2830fb9471ca7504cb3f725ddbd284a3682ad1a06e7fbfa6c4257214a2de7bfd4070e6f299
SSDEEP

24576:eLnE8xAb0ppWP32pxEq/vchFBhkHUDSfq9tI2OlYvkyTF448RWdWio2KMgZVilf7:eLnk/P+4FURc1AITu4tlT

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\3df41da2b3a1a7ddea8e68c4ed16a4b30d5a012fcccedb8211cab17151e678d1.exe
"C:\Users\Admin\AppData\Local\Temp\3df41da2b3a1a7ddea8e68c4ed16a4b30d5a012fcccedb8211cab17151e678d1.exe"
1⤵
PID:4032

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads