Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 11:04
General
-
Target
65d6507830f4d72048cca737d5f48a03ed41e6836188d371040de6bc63d45f57.exe
-
Size
97KB
-
MD5
b27615578b181a586f6c7434cb235a37
-
SHA1
0cc805a21d53b7a08beba334b86824a402c13720
-
SHA256
65d6507830f4d72048cca737d5f48a03ed41e6836188d371040de6bc63d45f57
-
SHA512
32d11136759db41406035295ce4b5438e524b07658c0c06c63a4c9b7abe49ba328ec91d05f33ddda24b8d11b845beaf4845b4cf9e5a4547d0a2ec4b4c0560452
-
SSDEEP
1536:QpgpHzb9dZVX9fHMvG0D3XJ/7NeYRNwKN+BCxTlmkIfbmhA2l:mgXdZt9P6D3XJReqwKN+BCWNfi3
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\65d6507830f4d72048cca737d5f48a03ed41e6836188d371040de6bc63d45f57.exe"C:\Users\Admin\AppData\Local\Temp\65d6507830f4d72048cca737d5f48a03ed41e6836188d371040de6bc63d45f57.exe"1⤵