Analysis
-
max time kernel
91s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
22/09/2022, 05:57
General
-
Target
da65b70db593b6e0a1efc67b9a1688f60ff7acc765c025471647c07777f0a95c.exe
-
Size
2.1MB
-
MD5
9d4bdcac6195c7491bfe346396eb04d1
-
SHA1
8c08a96c764158eae4a94adce82b41b1faeee3b2
-
SHA256
da65b70db593b6e0a1efc67b9a1688f60ff7acc765c025471647c07777f0a95c
-
SHA512
c40c6c585fa707e7c00c6d0c8bd88ecf51e88268d1fbfe1ff0d91523f3154a96808c0da39cfafa6fcb3fff7575e41b08bd55860167c10adcbe06f0d1dc2568e5
-
SSDEEP
49152:yh7YcEhnLziYo310WWoX31IJHLcNfjqIV+F2XYRLlS:y7NE1ziYo3B3LqiXYDS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\da65b70db593b6e0a1efc67b9a1688f60ff7acc765c025471647c07777f0a95c.exe"C:\Users\Admin\AppData\Local\Temp\da65b70db593b6e0a1efc67b9a1688f60ff7acc765c025471647c07777f0a95c.exe"1⤵