c2653f3ac4c23b92e973c2694cea46f72f522ac67316d653e39e44e6e032f654 | Triage

Analysis

max time kernel
69s
max time network
127s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
15-02-2023 21:10

Sharing

Report Analysis Logs

General

Target

c2653f3ac4c23b92e973c2694cea46f72f522ac67316d653e39e44e6e032f654.exe
Size

8.5MB
MD5

3b3f7ded02ea24d272c32247f1abd133
SHA1

4c2d238b84a5decb001a95407066a9c0f3905fd1
SHA256

c2653f3ac4c23b92e973c2694cea46f72f522ac67316d653e39e44e6e032f654
SHA512

2ff7d4aaf2899621bf0e1078313e223fe40acc2b6e67ca72ec950901bf0cac9bf2b7a6aace95d2e1c45470917b71d7fd5a1973f0c6d2aaca5f9a2db7814d68dc
SSDEEP

196608:utgFYrnavJDJBskWc+lnznXDZoHj9WtmzyZ+9+zXkWXzemV:NUavJJAc+ljXDZoD9wIozXksqmV

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\c2653f3ac4c23b92e973c2694cea46f72f522ac67316d653e39e44e6e032f654.exe
"C:\Users\Admin\AppData\Local\Temp\c2653f3ac4c23b92e973c2694cea46f72f522ac67316d653e39e44e6e032f654.exe"
1⤵
PID:4540

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads