Analysis
-
max time kernel
134s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
30/10/2022, 04:40
General
-
Target
3194b09c4f59bb44c6b72c43e0d83697a0497984a6d7e8a065d7b3229d070645.exe
-
Size
108KB
-
MD5
a31a280043f2b70c01dcf7665585c66b
-
SHA1
01a6fa24939ab61b40498ca7ba21bf6e296f219f
-
SHA256
3194b09c4f59bb44c6b72c43e0d83697a0497984a6d7e8a065d7b3229d070645
-
SHA512
1f9eb98457d440ba61dae046b7d1576e1293f7c205fe007921c19c2f55e79d23038cff4c8caf49f88d557d6f0367132adc099fc24c38d30ef002cf7f95fa1127
-
SSDEEP
1536:zoBJvNmH6rNvxi0Qc3dIGAT01mMGlwhZEnP:zozVZvJm01mBWEnP
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\3194b09c4f59bb44c6b72c43e0d83697a0497984a6d7e8a065d7b3229d070645.exe"C:\Users\Admin\AppData\Local\Temp\3194b09c4f59bb44c6b72c43e0d83697a0497984a6d7e8a065d7b3229d070645.exe"1⤵