Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
20-10-2022 10:29
General
-
Target
a8fae5e69d89996d3415af5a62bc357c3a1d9433f066faa7377badf50d7d7376.exe
-
Size
504KB
-
MD5
f2d6791eec52a6972465910191e9825b
-
SHA1
8c262558775735a9789d8ad621ae55f879d0585a
-
SHA256
a8fae5e69d89996d3415af5a62bc357c3a1d9433f066faa7377badf50d7d7376
-
SHA512
b0cf1d71346899dac59752deebb09dc4c348e20736da03ecb648310f9500e48eda5bd244507f6bb3ff908d0cfc89bc66dacdfb9f6da2aa43a382dc3df885430e
-
SSDEEP
12288:cJ9dKfQ1yCtBYd1eHxVF5HcZ6LnmsHaeIld/DARe4yWIw:K9dKfQ1hBYaHxlcZarHaXlxDke4Mw
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a8fae5e69d89996d3415af5a62bc357c3a1d9433f066faa7377badf50d7d7376.exe"C:\Users\Admin\AppData\Local\Temp\a8fae5e69d89996d3415af5a62bc357c3a1d9433f066faa7377badf50d7d7376.exe"1⤵