Analysis
-
max time kernel
141s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19-09-2022 05:40
General
-
Target
91aa0be43b3e1ab78895942d179aa975118247a1fbeae9d046e86f92349cdaf9.exe
-
Size
997KB
-
MD5
26080d0088cf83b6c68574511926da6d
-
SHA1
e7b7ccca29a65e394d1dade54ea15b42ab4bc8d5
-
SHA256
91aa0be43b3e1ab78895942d179aa975118247a1fbeae9d046e86f92349cdaf9
-
SHA512
a2e075800dfab45b1c5755a3f3056e1ddee306c58cb1451deda91abd731a2a4913a1907d3b48482e105acd71d6a8b20d6f5ff8979c6adc6fa748b1c1e81be2b8
-
SSDEEP
24576:FVJT4UlqnbTiFeOJYod0+tG3DCcot3umm8XK1Zv0tLBe7FkvNYjMhmSoe:FVRqPuFGzCcot3LT6HyBIeNVoe
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\91aa0be43b3e1ab78895942d179aa975118247a1fbeae9d046e86f92349cdaf9.exe"C:\Users\Admin\AppData\Local\Temp\91aa0be43b3e1ab78895942d179aa975118247a1fbeae9d046e86f92349cdaf9.exe"1⤵