Analysis
-
max time kernel
149s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-09-2022 15:50
General
-
Target
12ffee3e2c5daf4019991827cefc744154de65568c9527755bd548d0740058c5.exe
-
Size
62KB
-
MD5
9a6fbb702739a91f8c6167297460ab1a
-
SHA1
dcd93d17717f4f445f46bc133e08794b8ce4a1ad
-
SHA256
12ffee3e2c5daf4019991827cefc744154de65568c9527755bd548d0740058c5
-
SHA512
7c0425fac259ac884859694ca497a1ed632e76529c787c6b458ff571e5b4df3ccda0f2be9be7a4c5454b35a9fd7347e8fce4107d7c19093bcd5dfaa949b00254
-
SSDEEP
1536:leesq+ubW/z4/PjoTkaPHT2eN9lDh5vqbyB:ltDbuWjXaPHT3Nf9cbyB
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\12ffee3e2c5daf4019991827cefc744154de65568c9527755bd548d0740058c5.exe"C:\Users\Admin\AppData\Local\Temp\12ffee3e2c5daf4019991827cefc744154de65568c9527755bd548d0740058c5.exe"1⤵