Analysis
-
max time kernel
126s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 08:44
General
-
Target
c990c43f6978080b84d08a91a575839703d10955d039aa902c9ee76f6f25c8f7.exe
-
Size
923KB
-
MD5
6686fd0ea8f09760237316332ff55f70
-
SHA1
cbb568621bbe664ad423165200361f139d2c5d66
-
SHA256
c990c43f6978080b84d08a91a575839703d10955d039aa902c9ee76f6f25c8f7
-
SHA512
f8f098f305b899d4e8713e8f0a23d9bbe15becc7022693e171db071359bf043df6688ef64dc3f71bc9a135c433d0ebd22ecb356584e989c2404a94bdf7d119e0
-
SSDEEP
24576:7oBEOsbW4ck819MLsZZe+tBQKgPRtIcSI5SU9iWOPss:7oBy1cn19MIDQKgZ5SUUB3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c990c43f6978080b84d08a91a575839703d10955d039aa902c9ee76f6f25c8f7.exe"C:\Users\Admin\AppData\Local\Temp\c990c43f6978080b84d08a91a575839703d10955d039aa902c9ee76f6f25c8f7.exe"1⤵