Analysis
-
max time kernel
142s -
max time network
169s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
20/10/2022, 20:09
General
-
Target
68d04152e431e448cbfe1f19206ecb33ab7c5481d3d639bbf005ffcb925d3153.exe
-
Size
697KB
-
MD5
964d9a7669a97e8e68b27663eb75eb00
-
SHA1
c404b3c994c0027628f246863956c9f5c251770d
-
SHA256
68d04152e431e448cbfe1f19206ecb33ab7c5481d3d639bbf005ffcb925d3153
-
SHA512
a467cd47ddb5dd69d0649f440e9a83628c0e8f4d3eb7a7fb051da95b7f662f98b273b7a07371b36df7c68bbf556d365be53bf34d683bdaa67746946005af7047
-
SSDEEP
12288:vE7rq+sQf7Q7/2buHF2I7QhQKusEigCNQ87MDHDb1OJlyvDB2WcveJfR:W9sQf7Q74eLEhQKu1i5NLqDYXyvDB2Nu
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\68d04152e431e448cbfe1f19206ecb33ab7c5481d3d639bbf005ffcb925d3153.exe"C:\Users\Admin\AppData\Local\Temp\68d04152e431e448cbfe1f19206ecb33ab7c5481d3d639bbf005ffcb925d3153.exe"1⤵