Analysis
-
max time kernel
157s -
max time network
170s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 17:20
General
-
Target
ef9e5d55231e0f8fdd1ff5ec22c2e4d887585211b374cb9232dddbbe6c84478e.exe
-
Size
362KB
-
MD5
5f05c82e32730a785aed7c640486c340
-
SHA1
b2fc019c130643fb0eee0e9e647c254e09a32604
-
SHA256
ef9e5d55231e0f8fdd1ff5ec22c2e4d887585211b374cb9232dddbbe6c84478e
-
SHA512
944fc94a21fb95e1da07d0a7fbc19c393952faf01fdce0191386dd1d411d5aca1125d1f620d9b2b14013ca9bbc7396463cac8abf10a3c48b49f1b576cd712844
-
SSDEEP
6144:gb6/ARTTUUNigbK3vZKbU0VqMMxgD/LEz9vMAAHlpYOJLt6n3//9Mj93g:Yu+T4UN3K3vZnwg8IiHleOJM9odg
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ef9e5d55231e0f8fdd1ff5ec22c2e4d887585211b374cb9232dddbbe6c84478e.exe"C:\Users\Admin\AppData\Local\Temp\ef9e5d55231e0f8fdd1ff5ec22c2e4d887585211b374cb9232dddbbe6c84478e.exe"1⤵