Analysis
-
max time kernel
114s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 23:52
General
-
Target
70c1056a395a2a914ec2dd0936aa5f2679b65687ce4a7a01c5177bc39d64c01c.exe
-
Size
500KB
-
MD5
544ae3eac8640c69ee9dd670d10cce30
-
SHA1
2d194a7aa908e0173a614bd7d9a25d26555f7ce2
-
SHA256
70c1056a395a2a914ec2dd0936aa5f2679b65687ce4a7a01c5177bc39d64c01c
-
SHA512
042b9d56afdb6bec37de5be24627af52b89cbf7306ebf0f027c3878877d184f1a6a099f0cc2f88a47dd077211bff12e3cb7f454da8ba3e4633ed0bd5c437550f
-
SSDEEP
12288:m+T4UN3K3vwlhs5C7TTJZBZprkO9uAmRjUd/+:zT4Ul1sk7TTdBx/+
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\70c1056a395a2a914ec2dd0936aa5f2679b65687ce4a7a01c5177bc39d64c01c.exe"C:\Users\Admin\AppData\Local\Temp\70c1056a395a2a914ec2dd0936aa5f2679b65687ce4a7a01c5177bc39d64c01c.exe"1⤵