34aa7d93137fb1b30e343fccb91086fe42a2342e55b43273a9108a54eb4ebe5e | Triage

Resubmissions

06/03/2023, 20:14

230306-y1f3hseb9y 3

06/03/2023, 20:12

230306-yy1ddaeb9s 3

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
06/03/2023, 20:14

Sharing

Report Analysis Logs

General

Target

F8A29FA87E7AF8862B3FC67870E6F0F4.exe
Size

92KB
MD5

f8a29fa87e7af8862b3fc67870e6f0f4
SHA1

69a74e3d11e4c74b817e5b35aa60ad7171dd16b0
SHA256

34aa7d93137fb1b30e343fccb91086fe42a2342e55b43273a9108a54eb4ebe5e
SHA512

2b2e779674badd456384fe0eb601039dfa9e46772c8e469a4daa09b6fbe9faeda836977f8a2d276f21fb80c973079f0c94a9df13f423b8a9da08b02de93e6a23
SSDEEP

1536:s69EGE3xac8HaDoKi87nrbDjLpKervYbm4c2UqyJSmjTbrpEupynsRqyg7aX2WjU:s6903xacn7iqjNxrA6zqyJ1vPynkJg7/

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\F8A29FA87E7AF8862B3FC67870E6F0F4.exe
"C:\Users\Admin\AppData\Local\Temp\F8A29FA87E7AF8862B3FC67870E6F0F4.exe"
1⤵
PID:1996

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads