082f51d46dbd6f56479c3554c04bd20cb54952633bdb452542174738a360c1e9 | Triage

Analysis

max time kernel
26s
max time network
29s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
14/02/2023, 21:00

Sharing

Report Analysis Logs

General

Target

082f51d46dbd6f56479c3554c04bd20cb54952633bdb452542174738a360c1e9.exe
Size

14.7MB
MD5

06b30d1a8317511210814c17b1e6f2aa
SHA1

31881201b7dabb9c70cd38cb7297b46072c4eaae
SHA256

082f51d46dbd6f56479c3554c04bd20cb54952633bdb452542174738a360c1e9
SHA512

ea54073c6acade33325a73e9edf75574f42c35ad51d0612761489fee423be601683c4c97c6b1063cda9721f1d1b559693112b368778799757a28679cdd909152
SSDEEP

393216:/YsibZRiIwWSHeVRvWXV49ZCkAs3UHuTGmDCt2H11O2gw:kiIwLH4vrT9zTfM2bgw

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\082f51d46dbd6f56479c3554c04bd20cb54952633bdb452542174738a360c1e9.exe
"C:\Users\Admin\AppData\Local\Temp\082f51d46dbd6f56479c3554c04bd20cb54952633bdb452542174738a360c1e9.exe"
1⤵
PID:1204

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1204-54-0x0000000075C41000-0x0000000075C43000-memory.dmp

Filesize
8KB

Download