Analysis
-
max time kernel
122s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02-10-2022 12:51
General
-
Target
913f4f0b5c2c1a3fa27933f0295f97f4ddf77159fb13e2f7f9de8cefb646d45b.exe
-
Size
699KB
-
MD5
6c95b7dffff495452c254fb4adc45a00
-
SHA1
91c6ddd61beef10ace5ef31c136716c7a5555377
-
SHA256
913f4f0b5c2c1a3fa27933f0295f97f4ddf77159fb13e2f7f9de8cefb646d45b
-
SHA512
736be078a122e5cda42a4139dacc8ea80f5ad765264390a467339ac49b9c598179a04601c2ed9bc05469fe245aa23125a2188142dc465b06785e96fb20e09f75
-
SSDEEP
12288:6mU99GLEZasvT6may4PxagCNQ87MDHDb1OJlyvDB2WcveJf5mLm:6dcCRGmay4PA5NLqDYXyvDB2NeJfGm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\913f4f0b5c2c1a3fa27933f0295f97f4ddf77159fb13e2f7f9de8cefb646d45b.exe"C:\Users\Admin\AppData\Local\Temp\913f4f0b5c2c1a3fa27933f0295f97f4ddf77159fb13e2f7f9de8cefb646d45b.exe"1⤵