Analysis
-
max time kernel
174s -
max time network
206s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02/10/2022, 14:29
General
-
Target
dd4fa22dee04ea504c6eb222b46e51f60f04e6a3c92e18522e79e97c985efd0e.exe
-
Size
119KB
-
MD5
6f9c1ffbb9c72a2d2f618688b1329fb0
-
SHA1
7ce500cd88bc3d15a5798604ada16d6f91702b9f
-
SHA256
dd4fa22dee04ea504c6eb222b46e51f60f04e6a3c92e18522e79e97c985efd0e
-
SHA512
bac5ee00a1dff971f1e23adc1d480656df616834f1db31686a00a697cac3ab7fdd3456df22bdcb7970a81f798a0212f3657e4537716eef4d9d6792550547a5ec
-
SSDEEP
3072:2gXdZt9P6D3XJY7ME+K4CEohH1YxzgWZ/R/hH+E37EmChRieO:2e34W7Mi4Uogw/TH+47ER6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\dd4fa22dee04ea504c6eb222b46e51f60f04e6a3c92e18522e79e97c985efd0e.exe"C:\Users\Admin\AppData\Local\Temp\dd4fa22dee04ea504c6eb222b46e51f60f04e6a3c92e18522e79e97c985efd0e.exe"1⤵