Analysis
-
max time kernel
142s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
29/10/2022, 15:42
General
-
Target
34b7f032b16a13151730397034e9f034d8e6920aa0688ef5149cd4089cdd6fc5.exe
-
Size
990KB
-
MD5
38030bc187c3e75e6f11f168cdc286d6
-
SHA1
304e8d4a44daa35c691be597a206a59068cea71f
-
SHA256
34b7f032b16a13151730397034e9f034d8e6920aa0688ef5149cd4089cdd6fc5
-
SHA512
5ae6068210d82b132a4f3e93a64d2656284208fa5033f513d2c1dbf768dde275680b50147e23ec5ad510eeab90dc8195ebea7cf641e4220df8d81c9d712c79c1
-
SSDEEP
12288:hzdXNM4U+VNil19UU0tJvBhaN7yfW8kAMXGHTSoYD3W5Dkv+ahSB/vOIsNPPIF8i:BdX2OA9x0tJmRFdX7n3CkvnKoni87AUA
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\34b7f032b16a13151730397034e9f034d8e6920aa0688ef5149cd4089cdd6fc5.exe"C:\Users\Admin\AppData\Local\Temp\34b7f032b16a13151730397034e9f034d8e6920aa0688ef5149cd4089cdd6fc5.exe"1⤵