Analysis
-
max time kernel
138s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20-10-2022 00:04
General
-
Target
8065e39d0322b398f6a51044c71ae237a047b169e1ec2aee0e761183b2a2e34f.exe
-
Size
807KB
-
MD5
a173c8050bb4b449a26f538c827cb9c0
-
SHA1
051278585e86e454c6d6f95f12573d5839e21cf8
-
SHA256
8065e39d0322b398f6a51044c71ae237a047b169e1ec2aee0e761183b2a2e34f
-
SHA512
ea70e66fff5bf4d8189e499a4eee46e768903e91fdfd7ebdf1637de2bcb8e2e68c6d9284f6a81b168868b803a59331bb1a861ce01aa017c39c4f442f2d25df66
-
SSDEEP
24576:jIqMiFtuT4SaRK+POHZGhkLddoVmAJ4gQXH0Ne50jiGb52:TO5Gei4V30Ne9
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\8065e39d0322b398f6a51044c71ae237a047b169e1ec2aee0e761183b2a2e34f.exe"C:\Users\Admin\AppData\Local\Temp\8065e39d0322b398f6a51044c71ae237a047b169e1ec2aee0e761183b2a2e34f.exe"1⤵