Analysis
-
max time kernel
142s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
03/10/2022, 14:19
General
-
Target
75b739ab581cae96201234878033d0db9380dc75d441dc700e026f3140e6eaa5.exe
-
Size
303KB
-
MD5
6818cbdd72404df42936a462567a1470
-
SHA1
48c23449ee1258d255537040c370cbff4f4dc259
-
SHA256
75b739ab581cae96201234878033d0db9380dc75d441dc700e026f3140e6eaa5
-
SHA512
f5e81a7f7e1c89faae67816ac40c1dfb0b57dfef79177df201e4ecb7bf218a26295bdc5a8c5e929c31fcae2646db4576d01cd13da5d8d7ec146d47cadd2414a2
-
SSDEEP
6144:Ze34pVmCl5Xp8qGQO1Aa+BLMM/b6V+YL+XKF1eeAavuHRnkxIteoqkm9Zt:XmCp8Hh6pf6k9SbuHRkxI71mV
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\75b739ab581cae96201234878033d0db9380dc75d441dc700e026f3140e6eaa5.exe"C:\Users\Admin\AppData\Local\Temp\75b739ab581cae96201234878033d0db9380dc75d441dc700e026f3140e6eaa5.exe"1⤵