Analysis
-
max time kernel
136s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19-09-2022 05:56
General
-
Target
23bb2c898ae4e25db0a01e8f10d60c8075f2551d2664e8f9837608a4a73ed221.exe
-
Size
237KB
-
MD5
3b659d18401f68fdb06e309cafb4791d
-
SHA1
89ec210e7547d93632b78e70cf3a5f2c006c9c5c
-
SHA256
23bb2c898ae4e25db0a01e8f10d60c8075f2551d2664e8f9837608a4a73ed221
-
SHA512
428434ce0ef466e275fb400ff8ee57a85062ebd2311f7f387d9d4e7bb4f4451c7da002da94592444f7daf330798a057e37612b6a2af002ded96633183a793795
-
SSDEEP
6144:gb6PMnTTUUNigbK3vgBnsP7IqyiqARzUKkO:YeET4UN3K3vqn3mUVO
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\23bb2c898ae4e25db0a01e8f10d60c8075f2551d2664e8f9837608a4a73ed221.exe"C:\Users\Admin\AppData\Local\Temp\23bb2c898ae4e25db0a01e8f10d60c8075f2551d2664e8f9837608a4a73ed221.exe"1⤵