Analysis
-
max time kernel
111s -
max time network
15s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
04-01-2021 02:13
General
-
Target
2a800cff4584740ee43108e122f4797c455e5b6097774aeb33ebe666170b4968.exe
Score
7/10
Malware Config
Signatures
-
Loads dropped DLL 2 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2a800cff4584740ee43108e122f4797c455e5b6097774aeb33ebe666170b4968.exe"C:\Users\Admin\AppData\Local\Temp\2a800cff4584740ee43108e122f4797c455e5b6097774aeb33ebe666170b4968.exe"1⤵
- Loads dropped DLL
- Suspicious behavior: GetForegroundWindowSpam