2283518aac1fbe1f1ca6a3ed3ecb73d2a4fceffdf3c101b87a1e450fdbba5a6f | Triage

Analysis

max time kernel
42s
max time network
45s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
07/01/2023, 19:40

Sharing

Report Analysis Logs

General

Target

2283518aac1fbe1f1ca6a3ed3ecb73d2a4fceffdf3c101b87a1e450fdbba5a6f.exe
Size

191KB
MD5

f665b85464964793c8c903af31fb2bd5
SHA1

d5dc3896bbced0ecb25d094038e845b7dfb1844c
SHA256

2283518aac1fbe1f1ca6a3ed3ecb73d2a4fceffdf3c101b87a1e450fdbba5a6f
SHA512

bccf4ef5d77509d660a5e311754fdf81ff03c39a64b0531ebd7d812b3b21001a598fd4c97df3405eaa76f0569026757e6a47c7b96af78c0f5668a0cea3299fd4
SSDEEP

3072:SQIURTXJBwJaceb0r7e06xOmcI/dQAEnulWrEEnZ48t480A/K/oHQ:Ss7waceKqfrmGlNiRW8HCL

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\2283518aac1fbe1f1ca6a3ed3ecb73d2a4fceffdf3c101b87a1e450fdbba5a6f.exe
"C:\Users\Admin\AppData\Local\Temp\2283518aac1fbe1f1ca6a3ed3ecb73d2a4fceffdf3c101b87a1e450fdbba5a6f.exe"
1⤵
PID:1388

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1388-54-0x00000000753C1000-0x00000000753C3000-memory.dmp

Filesize
8KB

Download