Analysis
-
max time kernel
169s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-09-2022 15:50
General
-
Target
0f78cea41852b4b219e4127e5db31404d463594d7e893c1498afe0938cf83813.exe
-
Size
62KB
-
MD5
4061a961fa4a41949deed8aa13e88a25
-
SHA1
46cd587c164bc5eb559f68f9aba59b009e9d5864
-
SHA256
0f78cea41852b4b219e4127e5db31404d463594d7e893c1498afe0938cf83813
-
SHA512
1022062dbc1712e0d144a980cf0e06757df7e08d49b5eb9243b3a880f5b9559dccd5e220fcf8601de59b360de0c5f2abb1b088d5d81932c381c2609ef34e7c87
-
SSDEEP
1536:leesq+ubW/z4/PjoTkaPHT2eN9lDh5vWbyF:ltDbuWjXaPHT3Nf9YbyF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0f78cea41852b4b219e4127e5db31404d463594d7e893c1498afe0938cf83813.exe"C:\Users\Admin\AppData\Local\Temp\0f78cea41852b4b219e4127e5db31404d463594d7e893c1498afe0938cf83813.exe"1⤵