3b61757c276c9f823c8d49f5322338891335c6ea17649ba0b39e36237d5d399d | Triage

Submit
Reports

Overview

overview

Static

static

3

8200755cbe...33.exe

windows10-1703-x64

8

29c7e87350...5b.exe

windows10-1703-x64

1

49cccd30a5...90.exe

windows10-1703-x64

9

b17911ddea...82.exe

windows10-1703-x64

1

02ca4397da...51.exe

windows10-1703-x64

1

022aeb126d...74.exe

windows10-1703-x64

9

smb-7teux2sm.exe

windows10-1703-x64

9

smb-onil0o36.exe

windows10-1703-x64

9

malware-sa...ab.exe

windows10-1703-x64

malware-sa...1).exe

windows10-1703-x64

6

malware-sa...n.xlsx

windows10-1703-x64

1

Analysis

max time kernel
1800s
max time network
1801s
platform
windows10-1703_x64
resource
win10-20240214-en
resource tags

arch:x64arch:x86image:win10-20240214-enlocale:en-usos:windows10-1703-x64system
submitted
17-02-2024 15:18

Sharing

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

8200755cbedd6f15eecd8207eba534709a01957b172d7a051b9cc4769ddbf233.exe

Resource

win10-20240214-en

windows10-1703-x64

10 signatures

1800 seconds

Behavioral task

behavioral2

Sample

29c7e87350cb03428fc108b03856095b.exe

Resource

win10-20240214-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral3

Sample

49cccd30a564410d1f9bbce89fa15890.exe

Resource

win10-20240214-en

windows10-1703-x64

3 signatures

1800 seconds

Behavioral task

behavioral4

Sample

b17911ddeab973db51362721c940d882.exe

Resource

win10-20240214-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral5

Sample

02ca4397da55b3175aaa1ad2c99981e792f66151.exe

Resource

win10-20240214-en

windows10-1703-x64

0 signatures

1800 seconds

Behavioral task

behavioral6

Sample

022aeb126d2d80e683f7f2a3ee920874.exe

Resource

win10-20240214-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral7

Sample

smb-7teux2sm.exe

Resource

win10-20240214-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral8

Sample

smb-onil0o36.exe

Resource

win10-20240214-en

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral9

Sample

malware-samples-master/Ransomware/Grandcrab/grandcab.exe

Resource

win10-20240214-en

gandcrab backdoor ransomware

windows10-1703-x64

5 signatures

1800 seconds

Behavioral task

behavioral10

Sample

malware-samples-master/Ransomware/Petya/4c1dc737915d76b7ce579abddaba74ead6fdb5b519a1ea45308b8c49b950655c (1).exe

Resource

win10-20240214-en

bootkit persistence

windows10-1703-x64

2 signatures

1800 seconds

Behavioral task

behavioral11

Sample

malware-samples-master/mitre-attack/Emotet+Trickbot_comparison.xlsx

Resource

win10-20240214-en

windows10-1703-x64

4 signatures

1800 seconds

Report Analysis Logs

General

Target

022aeb126d2d80e683f7f2a3ee920874.exe
Size

64KB
MD5

022aeb126d2d80e683f7f2a3ee920874
SHA1

b71b6d9af65c6afc4af9d546a330c097aafe3592
SHA256

bdd816b9d85947b9bd7f2462d6b177dd6dadfe83723fd4dde4eded130177b218
SHA512

e0d818f432431b8b40b303d79526001adc7f71f86a565f2dacb459094f47f3ef1711da8c3cb34d13b2bd91b69542cb079f54af952ac2697778ee2b7c5d087de8
SSDEEP

768:2W8+9FisiTZdz4HLCLTRnVuwGiJTPpfl6dW6WsyqAgg8RCW+jl2WDMrL4:2sisiTuLCLTRVuwZp5l/lsyqFg8B+RP

Score

9^/10

discovery

Malware Config

Signatures

Contacts a large (133318) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Processes

C:\Users\Admin\AppData\Local\Temp\022aeb126d2d80e683f7f2a3ee920874.exe
"C:\Users\Admin\AppData\Local\Temp\022aeb126d2d80e683f7f2a3ee920874.exe"
1⤵
PID:2528

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2528-0-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download
memory/2528-1-0x0000000000400000-0x0000000000428000-memory.dmp

Filesize
160KB

Download

© 2018-2024

Terms | Privacy