Analysis
-
max time kernel
147s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 11:04
General
-
Target
c554f726c6861c8e7afc8445919cabd3d84e41c05a89049ae2e629909f314d7c.exe
-
Size
140KB
-
MD5
13447efa02ad1857b83fdf31aa43d5b1
-
SHA1
528f446029a998d6f7a20cf7d63b1b5102ebb484
-
SHA256
c554f726c6861c8e7afc8445919cabd3d84e41c05a89049ae2e629909f314d7c
-
SHA512
a1ba99e43d32703a43de94ade12d0861d935d89f6d0361265486cd7bebdbc71adb859778f608f226ce39978a86bfdc551d8af307611b470385f459f964d71dd3
-
SSDEEP
3072:mgXdZt9P6D3XJReqwKN+BCWNfi8PHeqLRYipbBOnrc:me34VwKuNqALJOc
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c554f726c6861c8e7afc8445919cabd3d84e41c05a89049ae2e629909f314d7c.exe"C:\Users\Admin\AppData\Local\Temp\c554f726c6861c8e7afc8445919cabd3d84e41c05a89049ae2e629909f314d7c.exe"1⤵