582dd480c88ce4c7f7352c65d1ed6177a072ba245d1ffe26dd3be305e03b337c | Triage

Analysis

max time kernel
36s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
09/02/2023, 06:49

Sharing

Report Analysis Logs

General

Target

582dd480c88ce4c7f7352c65d1ed6177a072ba245d1ffe26dd3be305e03b337c.exe
Size

17.2MB
MD5

7a8f794671b27cb144ec8c4e00a4e29f
SHA1

98adde2c693817a9af3a39c5063790b63a514db2
SHA256

582dd480c88ce4c7f7352c65d1ed6177a072ba245d1ffe26dd3be305e03b337c
SHA512

5ed9091167e4a7e93ad3ff7830f0c317eb652afc13914bd8ef9bb2570667b2cc40f81238fe137599c79092e3815c40ac12f7a8eec4034d6cdf55b9e168c252c4
SSDEEP

393216:kRJeZ94NcjzLNM0Ht0yKj5bdIH4A37vnBhGxQsViy+OOomgJWHMf09Ja:rKczCy4Kt7vBk+sVtJJJWH/Ja

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\582dd480c88ce4c7f7352c65d1ed6177a072ba245d1ffe26dd3be305e03b337c.exe
"C:\Users\Admin\AppData\Local\Temp\582dd480c88ce4c7f7352c65d1ed6177a072ba245d1ffe26dd3be305e03b337c.exe"
1⤵
PID:2024

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2024-54-0x0000000074D81000-0x0000000074D83000-memory.dmp

Filesize
8KB

Download