Analysis
-
max time kernel
145s -
max time network
160s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-09-2022 15:53
General
-
Target
b6d4c3b56c0b12a12ff0e2baee3f46f4683f9e33a780c9631b61cf755eebc024.exe
-
Size
1.2MB
-
MD5
78231d5e17cf43a5a92bfbe2bf65bef0
-
SHA1
7a3522989f8df7d17943f8547f59daa1482a3be1
-
SHA256
b6d4c3b56c0b12a12ff0e2baee3f46f4683f9e33a780c9631b61cf755eebc024
-
SHA512
38868c3e6c0ed57e0543391fb0168a19adeaf47fa5b962e7865af0c8a9c1bc22ca4a43e9ab6ec5b3e6d1995d1dd520ed73438bac75872b7b3570e1cd35385f83
-
SSDEEP
24576:jQ4ip8IriSd7C3DdYWHrM2y95o5kxI919BfQrXz7BOF:fIrriSyDLwFBxI9pf8noF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b6d4c3b56c0b12a12ff0e2baee3f46f4683f9e33a780c9631b61cf755eebc024.exe"C:\Users\Admin\AppData\Local\Temp\b6d4c3b56c0b12a12ff0e2baee3f46f4683f9e33a780c9631b61cf755eebc024.exe"1⤵