Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
07-11-2022 14:59
General
-
Target
1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe
-
Size
98KB
-
MD5
0566e2dbaabf22b77038157992019cd0
-
SHA1
529864c1fdfbb99bb5191a242d63cf7e8749913b
-
SHA256
1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3
-
SHA512
4f750d842c7bea560254e0c3878f785fbc8555c8821264337f655f06cbb6e19e5dc4bd380c01f114bb7608f0c45fdf6964681290cb66838c9f9caa42ac07f0ea
-
SSDEEP
1536:EYTmwVUsW7dtJMHy0DxmJRppVM2RQRY/+v++3X0boy2EJU4cZjpK8PhYtHZec:nS17XJiDxmJRppq2RQe+30oy9QZjmZec
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe"C:\Users\Admin\AppData\Local\Temp\1113001ffd95960997349b034b362cb32f161303fa9e3712b83447a17c6a01c3.exe"1⤵