47dd3b96d620554569a957c1571b202f224a6ba2432cee71530613e1743fc0ac | Triage

Analysis

max time kernel
367s
max time network
856s
platform
windows10-1703_x64
resource
win10-20220901-es
resource tags

arch:x64arch:x86image:win10-20220901-eslocale:es-esos:windows10-1703-x64systemwindows
submitted
04/01/2023, 13:57

Sharing

Report Analysis Logs

General

Target

SpotX-Win-main/scripts/cache/run_ps.bat
Size

154B
MD5

f951690de39de946d6fc21f8f2ad967a
SHA1

ec4fff9088ac01bef6aba452550afc1e054f7023
SHA256

d37d21a54f78a7cd1c297109fc51c1f186073daf24bd3b90d623112de8f10c7f
SHA512

ed0a3871eb7da077d5b57c42ec8d5251b912e1ef808ec54fa32736547ff675ae7d9cc02e00f9521c7b639b861d80b0594b5b15c60cce4cc41f56bdfcb72e14cb

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\SpotX-Win-main\scripts\cache\run_ps.bat"
1⤵
PID:2748

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads