Analysis
-
max time kernel
148s -
max time network
185s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
25/06/2022, 21:28
General
-
Target
3800681577ad559904d9884db363e0f03b6df0a9a78052fab6927bbca9b48abd.exe
-
Size
1.7MB
-
MD5
7752bb10daa5530c75a9ecaeb5b857f2
-
SHA1
c22ee250bb78f2e60577186ae3a437f16fdf012b
-
SHA256
3800681577ad559904d9884db363e0f03b6df0a9a78052fab6927bbca9b48abd
-
SHA512
97bc483da8e623a5887f17bcdbe551790d6099dbedde6485405adf798ffc5eb784d9b2cf9fd8d83725a365e628b99d947bf84f9aafe316742a57d5644631654f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of FindShellTrayWindow 4 IoCs
-
Suspicious use of SendNotifyMessage 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\3800681577ad559904d9884db363e0f03b6df0a9a78052fab6927bbca9b48abd.exe"C:\Users\Admin\AppData\Local\Temp\3800681577ad559904d9884db363e0f03b6df0a9a78052fab6927bbca9b48abd.exe"1⤵
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage