Analysis
-
max time kernel
125s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
05-09-2022 15:50
General
-
Target
3757406d4b995a2a6e9f5b12a5ce317b84425b3534065a39705f49a5bdc0d4a9.exe
-
Size
58KB
-
MD5
474ceca29de2d7418e89828776f73286
-
SHA1
c411ab67a451fc612381dde2d00a3747842bb6ef
-
SHA256
3757406d4b995a2a6e9f5b12a5ce317b84425b3534065a39705f49a5bdc0d4a9
-
SHA512
e2b3de9c48f51898c737a79b5655cd17def648db01e909913a216332f1fbc79532fba61648bad07a31e3fd9fd0e13efc88ecc2592d005afc15c1bb80bdda69e5
-
SSDEEP
1536:kjC6L5A4AmT+/PL2DOEznuC4XiWTXENtHjebA:kjg4AmKsOol4XiWTUN1ebA
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3757406d4b995a2a6e9f5b12a5ce317b84425b3534065a39705f49a5bdc0d4a9.exe"C:\Users\Admin\AppData\Local\Temp\3757406d4b995a2a6e9f5b12a5ce317b84425b3534065a39705f49a5bdc0d4a9.exe"1⤵