Analysis
-
max time kernel
94s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
12/10/2022, 18:11
General
-
Target
a9d9f1ae60c904ec4558cb799451835ae83a89f235786877fc2c3089aaafe58f.exe
-
Size
633KB
-
MD5
790342fd6da224619ea8223f65cb0c66
-
SHA1
9576da8e6f205028f3578297170615d59b2c4209
-
SHA256
a9d9f1ae60c904ec4558cb799451835ae83a89f235786877fc2c3089aaafe58f
-
SHA512
d57d837a43036278bf8e2cc8a4570099245413e66fe6c943db41131192c9d1662df031178180358946b1d4ba3b26374c4a2e8fae7dc25ec4ce139d2fbda85417
-
SSDEEP
12288:KCy5t9UrNvc3Up0+tHMIrBj2JbFNBNpmI4zZRtHiIOLQ9iuKEd7BEHTa5nbg53oA:AtMCkmOMXJbFSv/JivQsG50+F2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9d9f1ae60c904ec4558cb799451835ae83a89f235786877fc2c3089aaafe58f.exe"C:\Users\Admin\AppData\Local\Temp\a9d9f1ae60c904ec4558cb799451835ae83a89f235786877fc2c3089aaafe58f.exe"1⤵