Analysis
-
max time kernel
410s -
max time network
484s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 11:04
General
-
Target
5fed05b33741dd449ea9c80fcb8ee965fc8e7bb13242199a000cfd7ccf9a975c.exe
-
Size
170KB
-
MD5
de9067ff8484efabb4f89864bd77c35e
-
SHA1
7ae00b516a4800759ceb23e25380994c5803ece3
-
SHA256
5fed05b33741dd449ea9c80fcb8ee965fc8e7bb13242199a000cfd7ccf9a975c
-
SHA512
fd7fe854ce09ff8892dd896e3efc28f140bfd9f01955c26f9c53ce78ca36784a1abb0ae06d2e28dafe97abe0288176e66ae04dd4b2af947d2a90613f8b00663b
-
SSDEEP
3072:mgXdZt9P6D3XJReqwKN+BCWNfi8PHeqLRYipbBOnrIIUV54HpeVNc:me34VwKuNqALJOeV5ZNc
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5fed05b33741dd449ea9c80fcb8ee965fc8e7bb13242199a000cfd7ccf9a975c.exe"C:\Users\Admin\AppData\Local\Temp\5fed05b33741dd449ea9c80fcb8ee965fc8e7bb13242199a000cfd7ccf9a975c.exe"1⤵