Analysis
-
max time kernel
90s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
23-11-2022 09:42
General
-
Target
c92d0b33aa96a9e0eacda4f13083b1b213d5048776d21cfb3693ac650585eeef.exe
-
Size
1.3MB
-
MD5
62db1bbcee132e1ffcdbd504990c879d
-
SHA1
eb98863776c08eb812e6e87a00f361d610ebf8af
-
SHA256
c92d0b33aa96a9e0eacda4f13083b1b213d5048776d21cfb3693ac650585eeef
-
SHA512
c3e75e72d0ca8683314295f50eeb8437ce10bee23e057f686225bd332bfa6f8a2b552696967a6d95e8f281f5c4345b1772c629e485dfd0f9c53f6a36d7ee1de8
-
SSDEEP
12288:S0/dP4yWOmaHOk30CbQqO8ThGkQai+5sy4kB/4:S8wk739skQai+G7o4
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\c92d0b33aa96a9e0eacda4f13083b1b213d5048776d21cfb3693ac650585eeef.exe"C:\Users\Admin\AppData\Local\Temp\c92d0b33aa96a9e0eacda4f13083b1b213d5048776d21cfb3693ac650585eeef.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1.4MB
-
Filesize
584KB
-
Filesize
5.6MB