Analysis
- max time kernel
121s - max time network
139s - platform
windows10_x64 - resource
win10-en-20211208 - submitted
14/12/2021, 16:24
General
- Target 0865175e49c2828e0a84ea2d80a17334.exe
- Size 320KB
- Sample211214-twdpdagba2
- SHA256 aaae3c6270dd40dea9bb17e13036ddb13f820c4e3ca44a9304a5d04237fa9bbb
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0865175e49c2828e0a84ea2d80a17334.exe"C:\Users\Admin\AppData\Local\Temp\0865175e49c2828e0a84ea2d80a17334.exe"1⤵