Resubmissions
05/08/2022, 20:45
220805-zjtsqahbc2105/08/2022, 20:39
220805-zfk2eaefgm1005/08/2022, 20:33
220805-zbxveahad63Analysis
- max time kernel
144s - max time network
175s - platform
windows10-2004_x64 - resource
win10v2004-20220721-en - resource tags
- submitted
05/08/2022, 20:39
General
- Target e-fact1835166189CCPQT.exe
- Size 323.2MB
- Sample220805-zfk2eaefgm
- SHA256 b528961fa3128c3d030a3636558db97c5e2814e0b87a79bd0ab2ec44fafc1cdb
Score
3/10
Malware Config
Signatures
- Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
- Suspicious behavior: EnumeratesProcesses 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e-fact1835166189CCPQT.exe"C:\Users\Admin\AppData\Local\Temp\e-fact1835166189CCPQT.exe"1⤵
- Suspicious behavior: EnumeratesProcesses