Analysis
-
max time kernel
128s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
14-05-2022 14:42
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
tmp.exe
-
Size
124KB
-
MD5
1eb15f19afe77f525510b2a3f2f7aba3
-
SHA1
866fd6d1fa7ff186be41f3363fcf35898cf2b212
-
SHA256
b8edc36da64ff688d0ce92996a9207790063a6d3068da6516f0b83dc28501f79
-
SHA512
acfa43085f16c2959d8a7a3f7d64345baeff6074b3709f7d11084ea97cf493785115c84535bea8c22784e0e764655de34c6860a365877b425ee6ce481990b476
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.