Analysis
-
max time kernel
143s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20-10-2022 00:03
General
-
Target
07d7b59eafb35437c39872bc452dd3ea923e5b9bf0de33a94d475f84f4ef178e.exe
-
Size
594KB
-
MD5
90cda661a937e94cc34cf4b2aa651600
-
SHA1
05fa213abfd8c2f4c8c3bee452ca33e711d5e0a8
-
SHA256
07d7b59eafb35437c39872bc452dd3ea923e5b9bf0de33a94d475f84f4ef178e
-
SHA512
c6f533fc47d15ca1ef7a25e4542a1f724c452f87eb7533f3bfc8176ffa0e7b384162b9d57b46fe5c3a5f4666b8517a0ed0d5168e52d8fb95aa5f0629ecb29258
-
SSDEEP
12288:dsTXoB1ZI4eBnEOHDei6yZcBrOIC21s3kCFGvvD/Y2J9Rc+YG7:dFU4eBnEYDeRJq3kW+YG7
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\07d7b59eafb35437c39872bc452dd3ea923e5b9bf0de33a94d475f84f4ef178e.exe"C:\Users\Admin\AppData\Local\Temp\07d7b59eafb35437c39872bc452dd3ea923e5b9bf0de33a94d475f84f4ef178e.exe"1⤵