Analysis
-
max time kernel
142s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
29/10/2022, 01:19
General
-
Target
89679aa3732add2bb7f1626b28a3945d74970be6e9050ff4d5fef147b32967a4.exe
-
Size
637KB
-
MD5
0518f276e3e5b2044ca4f2101d8b5e70
-
SHA1
e2ff63890bbc29447c8eb4132fc7ed511c58fe52
-
SHA256
89679aa3732add2bb7f1626b28a3945d74970be6e9050ff4d5fef147b32967a4
-
SHA512
d82f8582f14ba4bdf3990953e860df92e33468ac4a91866e7bf60c09536f23ab0bfa7cc6be1434e4be7d84f2ba3035dbea543a639e02772cc6596b8bddc462cf
-
SSDEEP
12288:zMjIgKKM4YoYAa2Hd+YNfnKzxLzojQkhosl224IK:zMWR1oYA3dnyl9sl23R
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\89679aa3732add2bb7f1626b28a3945d74970be6e9050ff4d5fef147b32967a4.exe"C:\Users\Admin\AppData\Local\Temp\89679aa3732add2bb7f1626b28a3945d74970be6e9050ff4d5fef147b32967a4.exe"1⤵