Analysis
-
max time kernel
135s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 10:02
General
-
Target
a123e09774809ec33d64e6a9b9df9372783dbb0da0653c2a06faaaaa76ecb98e.exe
-
Size
460KB
-
MD5
e080ffe721b2d4766e276596bb8059de
-
SHA1
0ea82190efec9c4f5b1061d96e06845d7b7667f9
-
SHA256
a123e09774809ec33d64e6a9b9df9372783dbb0da0653c2a06faaaaa76ecb98e
-
SHA512
aa90a735dfc9f984e2bfb904608f93bc9ca2f01b96ff3ecf000b0f6653b5aa04c95cebe163b409e547e969c49296faccdc96ec282a251760f2e18a8bf7e0c069
-
SSDEEP
12288:aDdLKMB+jYyijSloGiJHt3eLh6PZiiWW36A4A1h4:kdLH2YjOoDP3cpW3T4Aw
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a123e09774809ec33d64e6a9b9df9372783dbb0da0653c2a06faaaaa76ecb98e.exe"C:\Users\Admin\AppData\Local\Temp\a123e09774809ec33d64e6a9b9df9372783dbb0da0653c2a06faaaaa76ecb98e.exe"1⤵