bb9b28f186ff9cd231196d71b52b13f9e583b04e45ab06b5a782591799b6f009 | Triage

Analysis

max time kernel
42s
max time network
46s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/01/2023, 13:17

Sharing

Report Analysis Logs

General

Target

bb9b28f186ff9cd231196d71b52b13f9e583b04e45ab06b5a782591799b6f009.exe
Size

10.5MB
MD5

0c455e7e722bf837304aa6108572fee6
SHA1

f61f76b1f1ae81de89300097d7818350d0d1b244
SHA256

bb9b28f186ff9cd231196d71b52b13f9e583b04e45ab06b5a782591799b6f009
SHA512

f6a81c443dde33980d2c403975a0b5a9bfda24dacfb6ca5965e3423a82bed0022596b9344a548ac83a2be28ec1188e6761358c98bb9a14f305258ebf2cf8613e
SSDEEP

196608:V8AYiknLeHRFceZ+6KHlkOaULFCzXmrEhXrGRwb4WbAViH7+X6kUmjBup:C/LeHAmGHlkRULsKrEhXrPbTbAV1XGm8

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\bb9b28f186ff9cd231196d71b52b13f9e583b04e45ab06b5a782591799b6f009.exe
"C:\Users\Admin\AppData\Local\Temp\bb9b28f186ff9cd231196d71b52b13f9e583b04e45ab06b5a782591799b6f009.exe"
1⤵
PID:780

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/780-54-0x0000000076121000-0x0000000076123000-memory.dmp

Filesize
8KB

Download