Analysis
-
max time kernel
153s -
max time network
179s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29-10-2022 15:48
General
-
Target
1a213c1d9bbb62ed20f898ea7518253d11694d274759f18b3a784589509cf458.exe
-
Size
156KB
-
MD5
32255955c4df3d359b198e765e2e23f3
-
SHA1
fdea75c8ca32aa329cdc3204240973e4281d2727
-
SHA256
1a213c1d9bbb62ed20f898ea7518253d11694d274759f18b3a784589509cf458
-
SHA512
1c591b9118f38367a3a86fc3d35db4d78e4977a3a21449bb89f0f7b914b68d3a647df6fc0e62c598d3af69ae9fb2f02c1d3ee49db64207310fa0d3cfc7af1fe4
-
SSDEEP
3072:jdszWOITsEL50jl7yIRdxVwqc2TcweciCwo8ujkU463if6ZdSZB+yHksHvF:2zZZJRdxVwqc2Tcwec7bkn6q63SD+VMF
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1a213c1d9bbb62ed20f898ea7518253d11694d274759f18b3a784589509cf458.exe"C:\Users\Admin\AppData\Local\Temp\1a213c1d9bbb62ed20f898ea7518253d11694d274759f18b3a784589509cf458.exe"1⤵