Analysis
- max time kernel
110s - max time network
126s - platform
windows10_x64 - resource
win10-en-20211104 - submitted
16/11/2021, 11:54
General
- Target Order喜威達PO.21TTP1029(1116) 3.pdf.exe
- Size 392KB
- Sample211116-n2wt9adff7
- SHA256 7b3e20c702ed0d248dd327b4b0bf7f48224ed28aa19480b0dd65fae58a36458c
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Order喜威達PO.21TTP1029(1116) 3.pdf.exe"C:\Users\Admin\AppData\Local\Temp\Order喜威達PO.21TTP1029(1116) 3.pdf.exe"1⤵