Analysis
-
max time kernel
145s -
max time network
172s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/10/2022, 11:50
General
-
Target
0e61c31203b749c2e564534e2c9903ed75eed54547ba8946ba24f260c746b2ad.exe
-
Size
136KB
-
MD5
028b01e188cc18b3d35278d754a074df
-
SHA1
bc4aa68b30e8eb045811f4f0a3c88250496da989
-
SHA256
0e61c31203b749c2e564534e2c9903ed75eed54547ba8946ba24f260c746b2ad
-
SHA512
f8650f2aff418fbb8d7faecf11ae57fa35c081e24d02e0ce4dd2dccc8ff5be294b154e89f28d579b21a21fa2076477f359bb8c48b42c778534c2a3d05218ca7b
-
SSDEEP
3072:S1W3koFABSLdUQTrmuWA5QOhlWFJ1zGrNIGOCxfHx0:SI2WdpTzqzvGx/K
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e61c31203b749c2e564534e2c9903ed75eed54547ba8946ba24f260c746b2ad.exe"C:\Users\Admin\AppData\Local\Temp\0e61c31203b749c2e564534e2c9903ed75eed54547ba8946ba24f260c746b2ad.exe"1⤵