Analysis
-
max time kernel
69s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03-10-2022 08:24
General
-
Target
575e19f0a7bb0060821897ff7c34a9ac00c3a0965bf54afb6d9f6588127a8e50.exe
-
Size
333KB
-
MD5
6c485dbf25755a2cc33b2024d4e78550
-
SHA1
cbd69c592810b78936aa6573683800c0f0b78bce
-
SHA256
575e19f0a7bb0060821897ff7c34a9ac00c3a0965bf54afb6d9f6588127a8e50
-
SHA512
0798c9b4d39b6cd11a9e1ee57bc42d4befb53df78c3db20fc48ab2b52f76b584165152b2723f72cc4bc76f4d9a8b9c15f75567b109b4c74b2cf52dc8eb205f9d
-
SSDEEP
6144:3eTeM/nwFduF5gh8HafVR6A272Yx6lTYfknoERSZdSwmIaPD1aYqRjZl+:7M/wFIFW86fAKgQTnsSwSD1j6Zl+
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\575e19f0a7bb0060821897ff7c34a9ac00c3a0965bf54afb6d9f6588127a8e50.exe"C:\Users\Admin\AppData\Local\Temp\575e19f0a7bb0060821897ff7c34a9ac00c3a0965bf54afb6d9f6588127a8e50.exe"1⤵