Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
30/10/2022, 16:04
General
-
Target
f2592cc633e4624d681a3dfef85ab372dc42b49d2af7ea5826e3aa7f6e3ac3d0.exe
-
Size
168KB
-
MD5
81d3044130706d26118b1c5a5f31d2b0
-
SHA1
c9dc0c59b4f16947471b0cb9182a92f158231baa
-
SHA256
f2592cc633e4624d681a3dfef85ab372dc42b49d2af7ea5826e3aa7f6e3ac3d0
-
SHA512
c0b7066f5f06aa3dffba771af0259a2cd4a8c055e9c5a736725ca6ab2573463dc6d3a010f550f633afa41b3f381b865d106fe159ea1f6d79f5e875bc37244c3a
-
SSDEEP
3072:HgXdZt9P6D3XJPE1ZgGQUbrvJPEr4j/cQED5o+oHrzH2SSPOQ8nWXT8l:He34hE7rq+pW59oH/9sNqWD8l
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f2592cc633e4624d681a3dfef85ab372dc42b49d2af7ea5826e3aa7f6e3ac3d0.exe"C:\Users\Admin\AppData\Local\Temp\f2592cc633e4624d681a3dfef85ab372dc42b49d2af7ea5826e3aa7f6e3ac3d0.exe"1⤵