Analysis
-
max time kernel
136s -
max time network
182s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
05-09-2022 15:53
General
-
Target
c492754e6c21e22732ad1188c511745a3eea064696dc7f351d66e3c92bd63cef.exe
-
Size
57KB
-
MD5
965e509ec23296987d6886500439211c
-
SHA1
5707cd83225a9abc81228d9379a6f786c5e40639
-
SHA256
c492754e6c21e22732ad1188c511745a3eea064696dc7f351d66e3c92bd63cef
-
SHA512
9a2a543237874d612aa3f8f151170798bd3edb8a9a11c4cdbdced0fa9cf119188894ac89f5121c701240d104d0a272ae1e1a51e86bd43ac98777fb8b6c0a592e
-
SSDEEP
1536:Ceesq+ubW/z4/PjoTkaPHT2eN9lejebyE:CtDbuWjXaPHT3NfYebyE
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c492754e6c21e22732ad1188c511745a3eea064696dc7f351d66e3c92bd63cef.exe"C:\Users\Admin\AppData\Local\Temp\c492754e6c21e22732ad1188c511745a3eea064696dc7f351d66e3c92bd63cef.exe"1⤵