ec093afe6c253825872e53b051d7a38abfe0b1f737f19a42f83068d196c2c809 | Triage

Analysis

max time kernel
91s
max time network
135s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
12/02/2023, 00:43

Sharing

Report Analysis Logs

General

Target

textures/brdfLUT.dds
Size

256KB
MD5

63b9e2cffe4c03e83ef952e8a959a8d9
SHA1

baa59e1646e43615f005673c0641e6a0e19d31e8
SHA256

5cc50688061dc9ed221d41591a129e6037db5b7d836532081cdad03a6559d004
SHA512

e03577a61e08be35bf28941b3c44907713dfa28062785a8101ff7b076eabf33c830c231ce7989c04ad1b47377c067b6758640965fbc992390797c1fbeb034eac
SSDEEP

6144:VQHRoQAcZI/n41F5caNm4NSYD6y/XJ70Jm6xo:soQAEI/CmOzshM57Oo

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\textures\brdfLUT.dds
1⤵
PID:488

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads