e267102a61e6b23a856b351e23042f002b1743e0845fd3ab5f7f2e14b14813fc | Triage

Analysis

max time kernel
31s
max time network
33s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
11-03-2023 07:44

Sharing

Report Analysis Logs

General

Target

e267102a61e6b23a856b351e23042f002b1743e0845fd3ab5f7f2e14b14813fc.exe
Size

245KB
MD5

a1b5db348d455b61166c195b497613ed
SHA1

5fb8d784f553d91d404bf0d888593d8ea24faa13
SHA256

e267102a61e6b23a856b351e23042f002b1743e0845fd3ab5f7f2e14b14813fc
SHA512

bb1cbe87cf5081c6f4f92d9f4e057820ff81428fcf0ddf2a9e651c59973c55532ecb617fe84f6fb0d2cd01ce306e0e69d3202b34ec4e9ab3897c10da5a05e189
SSDEEP

3072:Bft58XspVgsikEws3SdAhhr0e25n69Hs0FAg0FuX4tHw7UfEkGxxxxD:BfP88qQdk0R5n69HsKAOzQls

Score

3^/10

Malware Config

Signatures

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

C:\Users\Admin\AppData\Local\Temp\e267102a61e6b23a856b351e23042f002b1743e0845fd3ab5f7f2e14b14813fc.exe
"C:\Users\Admin\AppData\Local\Temp\e267102a61e6b23a856b351e23042f002b1743e0845fd3ab5f7f2e14b14813fc.exe"
1⤵
PID:1104

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads