Analysis
-
max time kernel
91s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
11/10/2022, 21:02
General
-
Target
651e028b0661b91eaeacae4f516478a3783e3a2f1e221e55840ae5932d232911.exe
-
Size
12.0MB
-
MD5
bff2709a41c672c468492083567863f3
-
SHA1
1afb62ba3caf09fe80cf4b0625fc9ea7830b4cd0
-
SHA256
651e028b0661b91eaeacae4f516478a3783e3a2f1e221e55840ae5932d232911
-
SHA512
d93dbff2160207bae8213ddb47efa7229de4ee6df8d89ad16a7eabec0744bbe142f487e424698208a3b275dbb8df6bdd19507687ec7900382ac35857a06e242e
-
SSDEEP
196608:udOdYp1Sl2+AOCKqkuOPl7YU9swriTTOyVmhB9I6A9VB/NOLQqNmXm0oK4ze:uYmWRqsZ3sqiTTVVwB9I6AfB/NhDXt4i
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\651e028b0661b91eaeacae4f516478a3783e3a2f1e221e55840ae5932d232911.exe"C:\Users\Admin\AppData\Local\Temp\651e028b0661b91eaeacae4f516478a3783e3a2f1e221e55840ae5932d232911.exe"1⤵