Analysis
-
max time kernel
91s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
26-10-2022 19:09
General
-
Target
debaa2912c1801fafd763f802ed613ec28f38d67a60bd799dc4858487c902ede.exe
-
Size
1.9MB
-
MD5
345c6400332ca910305a2e21be44d11e
-
SHA1
69efad00f80bcf86beaf9ecbc40686d6cb1d5f89
-
SHA256
debaa2912c1801fafd763f802ed613ec28f38d67a60bd799dc4858487c902ede
-
SHA512
84165936d977021ef042daeb624a3f4f526c9e025ba3ed4ee5e5ffeca66ba6053c8386674fc964881d12b54ee9fa17dbd99e86ac79b262b01deaf1f05060d372
-
SSDEEP
49152:0mrMIbKDye9jYOJPU+SyDLbqJV3Ja3LzgfjebVLVm/VwJyJeVTiaGfHj0voHrVHm:BX5RehxmZgiaGtHJdI0q
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\debaa2912c1801fafd763f802ed613ec28f38d67a60bd799dc4858487c902ede.exe"C:\Users\Admin\AppData\Local\Temp\debaa2912c1801fafd763f802ed613ec28f38d67a60bd799dc4858487c902ede.exe"1⤵