Analysis
-
max time kernel
110s -
max time network
27s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
04-01-2021 02:13
General
-
Target
e2bbb71fe65dd6ffb22fcb05e99a687711d3d429c22d512a2a49166b69ffe3c6.exe
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e2bbb71fe65dd6ffb22fcb05e99a687711d3d429c22d512a2a49166b69ffe3c6.exe"C:\Users\Admin\AppData\Local\Temp\e2bbb71fe65dd6ffb22fcb05e99a687711d3d429c22d512a2a49166b69ffe3c6.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam