Analysis
-
max time kernel
112s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
30/10/2022, 03:34
General
-
Target
a3cb62267fcfa3eee385df987ece0c6f0ac39ba5a7160c089fc39557744880fa.exe
-
Size
1.7MB
-
MD5
939b547158984a2bbdd6d18f31b67b95
-
SHA1
3244606f82ac6af607a3e9bc4d224df98b4edee2
-
SHA256
a3cb62267fcfa3eee385df987ece0c6f0ac39ba5a7160c089fc39557744880fa
-
SHA512
87b89676eeea9e393d3c6fd2002bfbee24aa6c0adabcd006543677becaf723ec60bb9d34838c0db094e1b321225c41c87705ec239c82eaa3593660a8c1caa751
-
SSDEEP
49152:cMcAUtyx+6U+qaKXO7ebAdmwP5eIxFzdls/3lVM2LeOQy0L:cJtQZpKXO/dmwP5jzdls4AQy0L
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3cb62267fcfa3eee385df987ece0c6f0ac39ba5a7160c089fc39557744880fa.exe"C:\Users\Admin\AppData\Local\Temp\a3cb62267fcfa3eee385df987ece0c6f0ac39ba5a7160c089fc39557744880fa.exe"1⤵