Analysis
-
max time kernel
150s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
18/09/2022, 23:36
General
-
Target
22d8adf2cb19cf80c05ee90ff294b09a3fa6ade4f910bdd7ea76e558b3b526fe.exe
-
Size
500KB
-
MD5
fb61132237615268fb28de3848ad91e7
-
SHA1
2e0c23eb509844cdfa2991b4241dab1bcd1d71d8
-
SHA256
22d8adf2cb19cf80c05ee90ff294b09a3fa6ade4f910bdd7ea76e558b3b526fe
-
SHA512
a25901d1c04ed0baf3858fcd0fde630ac43a8fda7344f9f7ec4bc1ae67a3b9a07d816e9315c14bce9e9e3089fe49ea49d7fe447a1b0497ad4303c2f9a8998997
-
SSDEEP
12288:Ku2UjJAhotzKZw71GR858r74o6T/b4o1qm04:Ku2IJHZkr4o/o1v
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\22d8adf2cb19cf80c05ee90ff294b09a3fa6ade4f910bdd7ea76e558b3b526fe.exe"C:\Users\Admin\AppData\Local\Temp\22d8adf2cb19cf80c05ee90ff294b09a3fa6ade4f910bdd7ea76e558b3b526fe.exe"1⤵