Analysis
-
max time kernel
173s -
max time network
222s -
platform
windows10-2004_x64 -
resource
win10v2004-20220721-en -
resource tags
-
submitted
01-08-2022 16:15
General
-
Target
Nfs_201965465465465546587987465-pdf.exe
-
Size
9.9MB
-
MD5
f2d187835910ad910dac4d50e6d156a8
-
SHA1
f7b70efc93a7523457225d84b295ea0596b1cc7b
-
SHA256
2ab13e084603da4e895d4d2b97c17273a90c25c6a29ca4e11c0e84217c871ffa
-
SHA512
54913366cc56719ee1a4a6ef3d8c505391550315d43b4db45cd81d3ca5fe7e583a9800230018d03c67ebb3a5353c31f00fcd1cc670281037dc52bb519cbdba15
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nfs_201965465465465546587987465-pdf.exe"C:\Users\Admin\AppData\Local\Temp\Nfs_201965465465465546587987465-pdf.exe"1⤵