Analysis
- max time kernel
63s - max time network
142s - platform
windows10_x64 - resource
win10-en-20211014 - submitted
20/10/2021, 03:02
General
- Target DHL_102021文件重新摘要,pdf.exe
- Size 456KB
- Sample211020-djf1zaged4
- SHA256 bf8618fa46805e7d2018e06c23d78919f424a5b5bc3608bbe618d2dfd92a3cd1
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL_102021文件重新摘要,pdf.exe"C:\Users\Admin\AppData\Local\Temp\DHL_102021文件重新摘要,pdf.exe"1⤵