16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b | Triage

Resubmissions

10/02/2023, 23:07

230210-24aaxsaa21 7

10/02/2023, 23:03

230210-21x8ksad62 7

Analysis

max time kernel
183s
max time network
335s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
10/02/2023, 23:03

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Solar-Tweaks-Setup-4.2.0.exe
Size

59.3MB
MD5

dfdea5f4a771556305d2faef94c8cf18
SHA1

f0cbbd1a88c7ebbc84a8b68cbf695eead7273328
SHA256

16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b
SHA512

08ac72e28a3e621c05929bd8e0421975ca65749f0321d2eee163a16be7072ea0e81ad3d65bba7e455cedca33289f2aa6f6c5dfb42b45a627b95b3960db3b8642
SSDEEP

1572864:qy1s9ggeDH7QDv2zFZJTCT6MR9L0T+wKseEc:qy1sHYcL2zfNwbnLbdEc

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\Solar-Tweaks-Setup-4.2.0.exe
"C:\Users\Admin\AppData\Local\Temp\Solar-Tweaks-Setup-4.2.0.exe"
1⤵
PID:1892

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1892-54-0x00000000753F1000-0x00000000753F3000-memory.dmp

Filesize
8KB

Download