Analysis
-
max time kernel
166s -
max time network
241s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
30/10/2022, 20:46
General
-
Target
1065bdd61cf52b06f447fd3061bc2cb2278b9b736dad535757d375d3630630f9.exe
-
Size
18.0MB
-
MD5
719f49654bd085988e49b6a463ebf225
-
SHA1
66b0f5a9b93cb9305b2004f5ad044de0fda445f6
-
SHA256
1065bdd61cf52b06f447fd3061bc2cb2278b9b736dad535757d375d3630630f9
-
SHA512
d96751f36d0e8d705dc5a4cc55472794e0312cd27329b4e782dfea8f291c390fce555471030aef5c15b8d286d59ae5c0dc54d3581b822a54727a7759a663b22d
-
SSDEEP
393216:gX3g9+hfggtTCtJAaFzn3ST9R5YSpTeQQ1nXJunubiWf:weCTC/pzCZzQfuki4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1065bdd61cf52b06f447fd3061bc2cb2278b9b736dad535757d375d3630630f9.exe"C:\Users\Admin\AppData\Local\Temp\1065bdd61cf52b06f447fd3061bc2cb2278b9b736dad535757d375d3630630f9.exe"1⤵