Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19/09/2022, 05:57
General
-
Target
6e3b1f99b4a76c70ea37e47291cbec283226411ff4b939f7f3399f29aa3f5453.exe
-
Size
1.8MB
-
MD5
e2e81b9e54a519c682ac4b1e0cd22b78
-
SHA1
52a97b994cb2bddabfe14014cd0780b5e83cb641
-
SHA256
6e3b1f99b4a76c70ea37e47291cbec283226411ff4b939f7f3399f29aa3f5453
-
SHA512
007a2df63b83b2b34d5b18e9599c28625f1620f93a5c601ac19a13b021c29e4f6f88a23d71942a3c126a2ad34cbe71bbed0c4d1597bd96a72497cc60c071ad7f
-
SSDEEP
49152:ZLFGzCcot3LT6HyBIeNucVEwhxJOoGdW7hPeP6o7Mjo:ZLFeot3HIeNucFKhWtPePbso
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e3b1f99b4a76c70ea37e47291cbec283226411ff4b939f7f3399f29aa3f5453.exe"C:\Users\Admin\AppData\Local\Temp\6e3b1f99b4a76c70ea37e47291cbec283226411ff4b939f7f3399f29aa3f5453.exe"1⤵