Analysis
-
max time kernel
114s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
19/09/2022, 05:48
General
-
Target
15dd22b29efd1ed91333607b53050327c5186add0a0a1f8f3f21b07db130d17b.exe
-
Size
2.1MB
-
MD5
9a6a5ac2b8a46131edf75c20084c3bc2
-
SHA1
35f41eaaae02696f82c9190cdcd02ff0a946dbf1
-
SHA256
15dd22b29efd1ed91333607b53050327c5186add0a0a1f8f3f21b07db130d17b
-
SHA512
4a4320ad48f5ede37ceee1a7e7642b21a87556eb5444234210d5b188541df1b1b478f38bdb011bf9f9d958fbe2d2134394d498f6ed79332af7c41b75464ccfe3
-
SSDEEP
49152:kMl8w2SfwRC0TspB7yFJ36fjerSzLDicww5M+0e:kMldGC2spB7oRMcSMq
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\15dd22b29efd1ed91333607b53050327c5186add0a0a1f8f3f21b07db130d17b.exe"C:\Users\Admin\AppData\Local\Temp\15dd22b29efd1ed91333607b53050327c5186add0a0a1f8f3f21b07db130d17b.exe"1⤵