Analysis
-
max time kernel
90s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
20-10-2022 16:10
General
-
Target
da5a844ab90234b136630a58dda39310a8a0f916591601a31195362f37914ad4.exe
-
Size
415KB
-
MD5
9631c343291bde634fa3b7be1a305010
-
SHA1
55285687ee12cb2220ac94c98471114a441151b8
-
SHA256
da5a844ab90234b136630a58dda39310a8a0f916591601a31195362f37914ad4
-
SHA512
8e0d2434e15d863a1235958426eeb42c4ed67c00e641c1e617eb42a78f496c84ea1641aced4ed4990f3ab491155ef55a3c44a1e1791f27a151a7319c314a6a0b
-
SSDEEP
12288:7M/wFIFW86fAKgQTnsSwSD1j6ZlbGZD/kdyB:7M/wOF9ZHQTslXZliDf
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\da5a844ab90234b136630a58dda39310a8a0f916591601a31195362f37914ad4.exe"C:\Users\Admin\AppData\Local\Temp\da5a844ab90234b136630a58dda39310a8a0f916591601a31195362f37914ad4.exe"1⤵