Analysis
-
max time kernel
141s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
23-11-2022 19:00
General
-
Target
cb262e0f8bbe71bb40bdd427c5490b4cafe570dcfbbe8b41db5f9fc70b1e7c47.exe
-
Size
160KB
-
MD5
a7baaf5fc087e1494edfea4242429d22
-
SHA1
38b6a5fa8eb7dcecdcbaca25d1c283482ab04017
-
SHA256
cb262e0f8bbe71bb40bdd427c5490b4cafe570dcfbbe8b41db5f9fc70b1e7c47
-
SHA512
e23802a4155695f6890bd5b801e3b33bc1fb15a0b5e25eafb70d791ea2548c0a24d1e2f67a09fdb72da20d1e1009e28c6af4ac9840a4bdbe53cb3487a13836d8
-
SSDEEP
3072:NNACuMoDU8mCIGdcNMbfK9Pt49YPHOL+xZD/areAkSDv/0Pp:8UpcdcNmS9iWPHPHDSyi/0Pp
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\cb262e0f8bbe71bb40bdd427c5490b4cafe570dcfbbe8b41db5f9fc70b1e7c47.exe"C:\Users\Admin\AppData\Local\Temp\cb262e0f8bbe71bb40bdd427c5490b4cafe570dcfbbe8b41db5f9fc70b1e7c47.exe"1⤵