Analysis
-
max time kernel
112s -
max time network
139s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
17/10/2022, 21:37
General
-
Target
a9fcda91df8eb2a5d42dae2ac2e77ef2a27953089cdbad49488876894c4ea654.exe
-
Size
140KB
-
MD5
45c831ce402f9e73811fd63d0a0641ef
-
SHA1
4761f98dc9dac265548343dcde110d6d92ebbef9
-
SHA256
a9fcda91df8eb2a5d42dae2ac2e77ef2a27953089cdbad49488876894c4ea654
-
SHA512
2b6ba1cbaac6b1300e26472b391782a6c5eb88526d21a0562193741f9305890097964add1c3f3de2cebdd612cc5e6c31c5ebe50eb6476ab2db41b859b4e108a5
-
SSDEEP
3072:z3fPZsYh8c+sdUjpLisC4BRp8LIXE0QRHnXluiwuTtGNPADZdC:z3ZlgsdQlC2XvmfwctYPA7C
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a9fcda91df8eb2a5d42dae2ac2e77ef2a27953089cdbad49488876894c4ea654.exe"C:\Users\Admin\AppData\Local\Temp\a9fcda91df8eb2a5d42dae2ac2e77ef2a27953089cdbad49488876894c4ea654.exe"1⤵