Analysis
-
max time kernel
174s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04/10/2022, 05:45
General
-
Target
4401b89533060a95a16cfbcf0fdce9b8a2bcc8761b2f2374bdfd323b629ef809.exe
-
Size
1023KB
-
MD5
5007f09eefcdd2b0970e0662dd728ed0
-
SHA1
65bb35a233bbf56273ddad5aa956cb1da12203cd
-
SHA256
4401b89533060a95a16cfbcf0fdce9b8a2bcc8761b2f2374bdfd323b629ef809
-
SHA512
9265cdcc51375ed7893c79dfbb2cb9888b76d93d82e93a3fc8e20139acca3b34540b9d5b51c4666f4ea9cb31bfe455e0e6df9b149b9b36a5b8476e9d50df8542
-
SSDEEP
24576:FoBEXhbW4ck819MLsZZe+tBQKgPRtIcSI5SU9iWOPsUTuC:FoB+1cn19MIDQKgZ5SUUBHuC
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\4401b89533060a95a16cfbcf0fdce9b8a2bcc8761b2f2374bdfd323b629ef809.exe"C:\Users\Admin\AppData\Local\Temp\4401b89533060a95a16cfbcf0fdce9b8a2bcc8761b2f2374bdfd323b629ef809.exe"1⤵