Analysis
-
max time kernel
149s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/10/2022, 08:24
General
-
Target
d43d07859a59bb63cf8edd934156f6f998fc4e0a186737f2be7e8ddeff584458.exe
-
Size
592KB
-
MD5
601d766925452c34dac0136f551959d0
-
SHA1
f3256fce27971346e93278ae4e66f2f963ba5cd9
-
SHA256
d43d07859a59bb63cf8edd934156f6f998fc4e0a186737f2be7e8ddeff584458
-
SHA512
07c25d55afa4a0f747f74301096a25ecb06b689796ce4083c5773e0f9f65adc73b86364ebaf565db67e0378b2fdc879ee57c82984ffe65612bcccf5e831349c6
-
SSDEEP
12288:7M/wFIFW86fAKgQTnsSwSD1j6ZlbGZD/kdya7fVbPT4Gk8fkArBmw/a:7M/wOF9ZHQTslXZliDQ754v8sOlS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d43d07859a59bb63cf8edd934156f6f998fc4e0a186737f2be7e8ddeff584458.exe"C:\Users\Admin\AppData\Local\Temp\d43d07859a59bb63cf8edd934156f6f998fc4e0a186737f2be7e8ddeff584458.exe"1⤵