Analysis
-
max time kernel
146s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
21/10/2022, 04:59
General
-
Target
86ebdc51158660c09ce6963ac3b0b0ec0ce197a36a1f62a240dafda6f1b6ac2e.exe
-
Size
210KB
-
MD5
70823c3b197cba8208caecdc649c7e95
-
SHA1
6ceccdfd15c1781b6d06084ddbe0b33406819e68
-
SHA256
86ebdc51158660c09ce6963ac3b0b0ec0ce197a36a1f62a240dafda6f1b6ac2e
-
SHA512
79ea570087853f4f908096e0ff7b5830547f4ea6c42f8f6de84ae3d9f98e9963a9292748d711c6fa77592210315fdbdb24b20fe5b544089aaae885e371910070
-
SSDEEP
6144:jQqDcowZSbsQq8Pgss9y9Tvi02kb7KYMZR:nbsQEss94Dl2kfw3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\86ebdc51158660c09ce6963ac3b0b0ec0ce197a36a1f62a240dafda6f1b6ac2e.exe"C:\Users\Admin\AppData\Local\Temp\86ebdc51158660c09ce6963ac3b0b0ec0ce197a36a1f62a240dafda6f1b6ac2e.exe"1⤵