Analysis
-
max time kernel
75s -
max time network
126s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
31/10/2022, 00:52
General
-
Target
6e255b368d9593c726a187a51191e7daf315bfc8de04fb60e55e16f4c47a0e16.exe
-
Size
505KB
-
MD5
916912873887638b7c22a29119a141a8
-
SHA1
268510adb97c99a39f17f4e2001a3714b2412124
-
SHA256
6e255b368d9593c726a187a51191e7daf315bfc8de04fb60e55e16f4c47a0e16
-
SHA512
ef1fbf2cdad24ef5c7649f29cd31041e3bed84043d3f4d6dee09232e9073865718e9cd2478fd8ee066bf215aa4cc856e5310f7b9029853327b41e723b7a608e6
-
SSDEEP
12288:NLb1HS1nmJdaV6RfNvVjmcyyITpfBRO4UOHS+nm3:NLlYmKMNbKyITppR79m3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6e255b368d9593c726a187a51191e7daf315bfc8de04fb60e55e16f4c47a0e16.exe"C:\Users\Admin\AppData\Local\Temp\6e255b368d9593c726a187a51191e7daf315bfc8de04fb60e55e16f4c47a0e16.exe"1⤵