Analysis
-
max time kernel
145s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
21-11-2022 13:08
General
-
Target
e246b3f7faabd2a5c43b6e89d7ed25930e49d81e1eb33115ec9c029edc383ffe.exe
-
Size
536KB
-
MD5
3fbbd1c9dd59350a5c5a231cff46e390
-
SHA1
5040278c621d272a0260e81ac75535ae7d333ccd
-
SHA256
e246b3f7faabd2a5c43b6e89d7ed25930e49d81e1eb33115ec9c029edc383ffe
-
SHA512
fbd83357fa42395545b3762dd0e8f028f900c3e9114e38d884391d97aa8d2eb56ca7338a5c3d382c2d288af8ec0b42f976252ee514771939120cbbfbfb23f71f
-
SSDEEP
12288:7GKjHsYwkhXLF+ZPPfnEUnsEWfXstaYPn8kFk979UL50:7GlYwkQlvANcYrk+ALi
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\e246b3f7faabd2a5c43b6e89d7ed25930e49d81e1eb33115ec9c029edc383ffe.exe"C:\Users\Admin\AppData\Local\Temp\e246b3f7faabd2a5c43b6e89d7ed25930e49d81e1eb33115ec9c029edc383ffe.exe"1⤵