Analysis
-
max time kernel
105s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
05-09-2022 15:50
General
-
Target
0494e1b88f4a3b69162ef51971246f87c0ad434549a802ae7d54aee954190090.exe
-
Size
65KB
-
MD5
851b86dd9d1b266fe1467b573852f678
-
SHA1
f484f09509d86db157de23531d27ee9e0782689f
-
SHA256
0494e1b88f4a3b69162ef51971246f87c0ad434549a802ae7d54aee954190090
-
SHA512
121905163d9a39f8806b000f15802cc631710d81aa63aef272b8def0c3d65c0613705c391aa783a978708d2ef6f053d0b9d2cfb68c5e5a6a1809ddf3d5258eb2
-
SSDEEP
1536:8b3IJfjPXpzzG1xBQcT24Ndocyi8J81bYC:8b3cjPdGNTpNiLi8u1bYC
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0494e1b88f4a3b69162ef51971246f87c0ad434549a802ae7d54aee954190090.exe"C:\Users\Admin\AppData\Local\Temp\0494e1b88f4a3b69162ef51971246f87c0ad434549a802ae7d54aee954190090.exe"1⤵