Analysis
-
max time kernel
91s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
02/10/2022, 18:54
General
-
Target
2b8389329c26eb72aa590f655aeb51d222015b8106e52cf8b6ec5c53d6cbaf9b.exe
-
Size
463KB
-
MD5
daf7ee020ecde0ed6c90fc34d894b05b
-
SHA1
2fe58e54f764b2f191bd320f5ef8f37ca82a2fdf
-
SHA256
2b8389329c26eb72aa590f655aeb51d222015b8106e52cf8b6ec5c53d6cbaf9b
-
SHA512
96e803d2be1d90d32367017a267b4cf929e5f2484328440f89789f2e1c3e4ee60544eb6cff88377b80a6c87a2cf31de8bcf2ef354af33ed2c14e0ad4a9205f8f
-
SSDEEP
12288:cJ9dKfQ1yCtBYd1eHxVF5HcZ6LnmsHaeIld/DARe5:K9dKfQ1hBYaHxlcZarHaXlxDke5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2b8389329c26eb72aa590f655aeb51d222015b8106e52cf8b6ec5c53d6cbaf9b.exe"C:\Users\Admin\AppData\Local\Temp\2b8389329c26eb72aa590f655aeb51d222015b8106e52cf8b6ec5c53d6cbaf9b.exe"1⤵