Analysis
-
max time kernel
126s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
01-10-2022 21:07
General
-
Target
e41cfddc10d71d1694d8e7a69a75538daec9fb390e1dd4fc6cebe696945e8539.exe
-
Size
948KB
-
MD5
0709bf81d3641b144e8ecd6e7e1c4610
-
SHA1
2b862c39b4585943cdb7e10df80298aeef158490
-
SHA256
e41cfddc10d71d1694d8e7a69a75538daec9fb390e1dd4fc6cebe696945e8539
-
SHA512
ba741cb430f723684d799de422a917ef4f738aededcea71d427c8dd42022434ea0b61f45f886b1011fd3a34ca50be8b3d8e83897bb78e9644928fd526d62585c
-
SSDEEP
24576:U1dbW4ck819MLsZZe+tBQKgPRtIcSI5SU9iWOPsUTue:e1cn19MIDQKgZ5SUUBHue
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e41cfddc10d71d1694d8e7a69a75538daec9fb390e1dd4fc6cebe696945e8539.exe"C:\Users\Admin\AppData\Local\Temp\e41cfddc10d71d1694d8e7a69a75538daec9fb390e1dd4fc6cebe696945e8539.exe"1⤵