Analysis
-
max time kernel
149s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
04-10-2022 20:33
General
-
Target
c0173265a4deb7dfb66c44accf0c72cac72879effc80a2f693761eec1e65f686.exe
-
Size
1.9MB
-
MD5
32c7e05c54c60facedbec95851fc1b3b
-
SHA1
f61fe866efb4f78a850bc028ef8b8391359f254b
-
SHA256
c0173265a4deb7dfb66c44accf0c72cac72879effc80a2f693761eec1e65f686
-
SHA512
1c62decdcfbb65ad495541dfdb91012eae5fc0ff99fb5ccf8b501fbd6ed03d67f16c92c1ee916a4ee62ea192153c4d25b7f1e75b735fd378497afca5df445fed
-
SSDEEP
49152:496i+M5ypT0v9TrdFmrMbGKC43J8r0+T/6b:4NYpT0v9TBFQqGK+YG/4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c0173265a4deb7dfb66c44accf0c72cac72879effc80a2f693761eec1e65f686.exe"C:\Users\Admin\AppData\Local\Temp\c0173265a4deb7dfb66c44accf0c72cac72879effc80a2f693761eec1e65f686.exe"1⤵