Analysis
-
max time kernel
19s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
-
submitted
30-10-2022 20:36
General
-
Target
9454dfa00c0f75ccea46d5c9b88ec8e7851e9a68d5dc8c340bc9f5dad8b43386.exe
-
Size
84KB
-
MD5
911676e6ec03cb446dbbb693543b1c68
-
SHA1
21ca2f26d42c0c33b3cb0b2ad0f4197ed57e09b8
-
SHA256
9454dfa00c0f75ccea46d5c9b88ec8e7851e9a68d5dc8c340bc9f5dad8b43386
-
SHA512
10888f7b8ff77e8790a97bb764078060fcbd4f91fa1fde22efc6d090b46e23c0d93c82556c8dd5326accef3e2b8bb6645c61f579fdcca8b2659e8faec0306687
-
SSDEEP
1536:CTZch/d//SqotmfOBNPUAmoDSz+rKIL954D6cfCM37/:CTZe/d//DogwFDmoZK6TdM3z
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\9454dfa00c0f75ccea46d5c9b88ec8e7851e9a68d5dc8c340bc9f5dad8b43386.exe"C:\Users\Admin\AppData\Local\Temp\9454dfa00c0f75ccea46d5c9b88ec8e7851e9a68d5dc8c340bc9f5dad8b43386.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
84KB
-
Filesize
84KB