Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
21-11-2022 13:18
General
-
Target
b4e65312c856b38deb1d6085f8787c1e8a7cdb8db90822407b84244cad88984e.exe
-
Size
716KB
-
MD5
0966406bbeb3afad02fef821996ff1d0
-
SHA1
a7ff07d5f839ae042ba5f973a320c2822c4efc8b
-
SHA256
b4e65312c856b38deb1d6085f8787c1e8a7cdb8db90822407b84244cad88984e
-
SHA512
7e10764f6081a3d4dd9fc86b0fa2535e5f1defccac8b67d5f931928fa8a33e481b301b4f6e1bc4f1b5f3566db8c605572d350fd781dac2446b31f8d9bc2713d1
-
SSDEEP
12288:AJxQdnOx/TqFLOJUh737BxoZvHEFKAXO0OTd4QccgSvPu:AJwO1OhOahnBxScFvXORh7gOm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b4e65312c856b38deb1d6085f8787c1e8a7cdb8db90822407b84244cad88984e.exe"C:\Users\Admin\AppData\Local\Temp\b4e65312c856b38deb1d6085f8787c1e8a7cdb8db90822407b84244cad88984e.exe"1⤵