Analysis
-
max time kernel
130s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
01/10/2022, 19:04
General
-
Target
6dff45a423e21d4f8a85a855003e33a43825d2b865785a34d7e6c675ec1896be.exe
-
Size
374KB
-
MD5
69fdc25595aa3ce2f8304d27482051b0
-
SHA1
e4185d275b3d816b71a74157b13e6c3bd0fee444
-
SHA256
6dff45a423e21d4f8a85a855003e33a43825d2b865785a34d7e6c675ec1896be
-
SHA512
0884bff7b1f15529143b536181497fa1a366315d200b46dfca778b4267e7cc3e453cfe57472a68ab7f0cad5383aee57bec970f6c15b76ce253640604047a5e27
-
SSDEEP
6144:/I2Gd1in4pJ6DkBfKZUz/GXnMvfsOfYnh35JFFTGbIMlILTAdEBJaQHTp98:gzd1iOc1ZM/yMvfsuYhJJ/TKkLZBJaC0
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6dff45a423e21d4f8a85a855003e33a43825d2b865785a34d7e6c675ec1896be.exe"C:\Users\Admin\AppData\Local\Temp\6dff45a423e21d4f8a85a855003e33a43825d2b865785a34d7e6c675ec1896be.exe"1⤵