Analysis
-
max time kernel
76s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
30/09/2022, 18:53
General
-
Target
tmp.exe
-
Size
555KB
-
MD5
1d722197f3f1b80030b5f158f9af4a35
-
SHA1
4e768235223fe6162e4c6524a2a31c7325cd8f8f
-
SHA256
432e71f2b920de6b589b982d772916adb4820a1a8f6e3e6370b6afe29a3d88cf
-
SHA512
15f1edb401540da706301805ba8416848d8c79bd38700198bb9ef25e7777e3a59fae02b53ee2817388e3dcc4edd0c4ae6a5d379b27f5e28d166329b9aeff3d3d
-
SSDEEP
12288:ss4y6JfDvWLLDYCJNm0k/9r0BG0wnuKeWcdaT:ssJ6JfDvWPUCnkWenTeWcdaT
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵