Analysis
-
max time kernel
143s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
19-10-2022 16:58
General
-
Target
ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe
-
Size
357KB
-
MD5
a11be479ae7adb8b9fedc96ec5ff61e0
-
SHA1
c4031168feb26f5035392b5cb6635968d8fade3d
-
SHA256
ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5
-
SHA512
f0b194d2c9e81d2ea254ec4c4d115f062fe5a8b38faa8ad912409511510e662152f3bf972c69fde2f9b6578a9553fb6baf6cc94459968ce9c8c2c15dfd616d68
-
SSDEEP
6144:2e34o0C59Fpk0KkB8/BTP827dk4ggqNkL9ECA6dkj/mE3nzLuMte74CqOF9se5NP:F0wDk0KkcBTP8SxHEC9EC9wDXzLDte7f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe"C:\Users\Admin\AppData\Local\Temp\ab0cad416babaeae2e9b513c71c58d2b4269b4fc115927efb2f1cd974e125dc5.exe"1⤵