Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
06-11-2022 23:03
General
-
Target
9aa1138c9ca47ddc12f4a0c31fb7c9c8796274a8febf5fa36db3a7068348b397.exe
-
Size
216KB
-
MD5
0cb10b8a194cf417e4a2306cdd894b10
-
SHA1
bd91b6b09948b79b15f1fe01a6af628d108c5e42
-
SHA256
9aa1138c9ca47ddc12f4a0c31fb7c9c8796274a8febf5fa36db3a7068348b397
-
SHA512
892e4b9f074d49b033e33ae68b371d7c841063716ca611792d4291f97a20e6316e4d021839db9196f13b3663f92c2fe3bc64d128552d9509e80e038884220b31
-
SSDEEP
6144:9GiksBX9Q8sR19iNKdUEsgiGs91vc1z/YN25:+sk8sR1DdUpgiN1k1zSm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9aa1138c9ca47ddc12f4a0c31fb7c9c8796274a8febf5fa36db3a7068348b397.exe"C:\Users\Admin\AppData\Local\Temp\9aa1138c9ca47ddc12f4a0c31fb7c9c8796274a8febf5fa36db3a7068348b397.exe"1⤵