Analysis
-
max time kernel
179s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 10:50
General
-
Target
e3b576b83d198cc36ad77d57a2a4a4acb7343e80cd003dc7d6d5ac62414a1e59.exe
-
Size
82KB
-
MD5
7e90836e46637e814b92eeeb515b4331
-
SHA1
268a1539cd156c2e526bdefa73f8f7f81f794e06
-
SHA256
e3b576b83d198cc36ad77d57a2a4a4acb7343e80cd003dc7d6d5ac62414a1e59
-
SHA512
a3ee9ce5b8327510382e9bf7c3c31650bfbb4661cc4ccc4a9df0382a5aaf364f3b474cbfb62324f96f5d7e8e28a0cd08fe5d507b70f3d81821980d4b20b25bef
-
SSDEEP
1536:tqdBPkbwScJ2V+5n697ypBSLdUQvVjYynW5OJ7Ocm3Np91OjH:W1W3koFABSLdUQtjpWGScmdp91OjH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e3b576b83d198cc36ad77d57a2a4a4acb7343e80cd003dc7d6d5ac62414a1e59.exe"C:\Users\Admin\AppData\Local\Temp\e3b576b83d198cc36ad77d57a2a4a4acb7343e80cd003dc7d6d5ac62414a1e59.exe"1⤵