Analysis
-
max time kernel
151s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-09-2022 15:50
General
-
Target
0f41c175bc3b7e6c6688b143d5e8d037d5ce6671886fb3a10e5fcbaa6cd1cd07.exe
-
Size
63KB
-
MD5
4051a906e22259cea034483f2dbd2498
-
SHA1
f065f37730042667ff26f111bb1434e422a7514a
-
SHA256
0f41c175bc3b7e6c6688b143d5e8d037d5ce6671886fb3a10e5fcbaa6cd1cd07
-
SHA512
40da8e2677f85f2f4bc21c9731a562d87d0e6e6fea4d1992ec47a72234df83076991a3b163043fe02f58ba6dd566a679ba14408ee672e38418f8cfd752c080b0
-
SSDEEP
1536:wjC6L5A4AmT+/PL2DOEznuC4XiWTXENtFh5v/b9:wjg4AmKsOol4XiWTUNl5b9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f41c175bc3b7e6c6688b143d5e8d037d5ce6671886fb3a10e5fcbaa6cd1cd07.exe"C:\Users\Admin\AppData\Local\Temp\0f41c175bc3b7e6c6688b143d5e8d037d5ce6671886fb3a10e5fcbaa6cd1cd07.exe"1⤵