Analysis
- max time kernel
16s - max time network
113s - platform
windows10_x64 - resource
win10v20201028 - submitted
25/02/2021, 10:58
General
- Target 9074f8806ebcff10cfb69e1e66caafc5.exe
- Size 5.2MB
- Sample210225-a8prbkadan
- SHA256 b3f78a3f3823808cf3622128fe076552fb8bbdbedad1fe60607ab6f9981697f4
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9074f8806ebcff10cfb69e1e66caafc5.exe"C:\Users\Admin\AppData\Local\Temp\9074f8806ebcff10cfb69e1e66caafc5.exe"1⤵