Analysis
-
max time kernel
137s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/10/2022, 23:38
General
-
Target
64819836e609c3c10392bf44932b3050facd06ca02f2d5aa8e60be3f4f4bc3f1.exe
-
Size
96KB
-
MD5
0495049aaeca27c4cb53f03eb5806b2f
-
SHA1
1b78b304e3cc611a46c8e2d2a9568fc96a79f370
-
SHA256
64819836e609c3c10392bf44932b3050facd06ca02f2d5aa8e60be3f4f4bc3f1
-
SHA512
50611a510526c8fd6c10f45e4ce115dbb5233c824f95410120bae1c556eb79bd997295aabb58ded43e470747ada9d05315b16b69c412a25c92994960da5f9a55
-
SSDEEP
3072:LpzjyRDxUhKAfckJpuQW2cmnsCW+YAI2tO/2WCs+U:JjyRDxUhYWu12cm7vtVWCs+U
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\64819836e609c3c10392bf44932b3050facd06ca02f2d5aa8e60be3f4f4bc3f1.exe"C:\Users\Admin\AppData\Local\Temp\64819836e609c3c10392bf44932b3050facd06ca02f2d5aa8e60be3f4f4bc3f1.exe"1⤵