Analysis
-
max time kernel
9s -
max time network
51s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 01:21
General
-
Target
5e8dd98ace03288350f020e5c481dd0d53e7cdf14dd2d609ee9611fcecf569dc.exe
-
Size
108KB
-
MD5
0ab319d2a8e43309fc37f5eef69dd5a0
-
SHA1
6dc2b861f3b8ae284f56a3af779831d048947f00
-
SHA256
5e8dd98ace03288350f020e5c481dd0d53e7cdf14dd2d609ee9611fcecf569dc
-
SHA512
e37f8d64bb4537da937333a127dd700088b8dc91f41d8ed7d1986233cfb08572240c42fcd241d19db6a164137f907c432612082a67bc927b3b8ab8f587c0d139
-
SSDEEP
3072:PKL0xw3sSx2bPnJ45GGi1z3nO3fYoquuBX:P2sSAbxZ71zGfYoquGX
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5e8dd98ace03288350f020e5c481dd0d53e7cdf14dd2d609ee9611fcecf569dc.exe"C:\Users\Admin\AppData\Local\Temp\5e8dd98ace03288350f020e5c481dd0d53e7cdf14dd2d609ee9611fcecf569dc.exe"1⤵