Analysis
-
max time kernel
168s -
max time network
190s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 11:01
General
-
Target
f97daa22cd4fb8de8b7fac2577a6530c8f15b9a3bf2b92b25c2ec9a1849c8d64.exe
-
Size
911KB
-
MD5
4c6a4c67c74bf70a7c9d887b3fd1df5c
-
SHA1
436a58f8fd39a280c8efa7700748bd4e61e03046
-
SHA256
f97daa22cd4fb8de8b7fac2577a6530c8f15b9a3bf2b92b25c2ec9a1849c8d64
-
SHA512
d7428f9af4c7ec775b280dcc761017665b85bee8dd79401dd2478bfe44201e002c5284b24c051e8e6d1efb36955bd9d0eb7732347471a46dd3ae989c1dcaa700
-
SSDEEP
24576:DdpgcD/mvmclDzsePPDlgKa9Inx+W2+I/FWeu5qJu10kP:DdRSvDBfuZ9IwWuFWeSqJo0s
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f97daa22cd4fb8de8b7fac2577a6530c8f15b9a3bf2b92b25c2ec9a1849c8d64.exe"C:\Users\Admin\AppData\Local\Temp\f97daa22cd4fb8de8b7fac2577a6530c8f15b9a3bf2b92b25c2ec9a1849c8d64.exe"1⤵