Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20/10/2022, 00:03
General
-
Target
ce913244f84116dee36bbbb5a09d9c8a27e6f3fc7a60967af491ff66275435b7.exe
-
Size
885KB
-
MD5
91c332fbd9acadefdb623dbb796c36d0
-
SHA1
6c0308f76fbfb8c7617ff1da840270ad19dec857
-
SHA256
ce913244f84116dee36bbbb5a09d9c8a27e6f3fc7a60967af491ff66275435b7
-
SHA512
658c850fac3c9827ade3627769405199ccb23fb061e1499b6fde167b00e45e0e16bc014fce7ee84a4b2d9628c809b210778be0320aef1abe5e4fba0a243af6a6
-
SSDEEP
24576:OoBEhyI0B/+EGBeBIB/fVmPrdtvddiv1AMJsE:OoBnBWEGBeWN2rTdditA2/
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce913244f84116dee36bbbb5a09d9c8a27e6f3fc7a60967af491ff66275435b7.exe"C:\Users\Admin\AppData\Local\Temp\ce913244f84116dee36bbbb5a09d9c8a27e6f3fc7a60967af491ff66275435b7.exe"1⤵