Analysis
-
max time kernel
189s -
max time network
223s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23/11/2022, 19:47
General
-
Target
734ff6e04a46e22422fef083ce5ce2c672e71244cfc883ca6c3ec9d995140860.exe
-
Size
160KB
-
MD5
3c324072d0d6024028ee34577e8bfca3
-
SHA1
2212f1d818476400e6848f59a829209b4a633b7b
-
SHA256
734ff6e04a46e22422fef083ce5ce2c672e71244cfc883ca6c3ec9d995140860
-
SHA512
f0b9d37ac44647d9108c8ae4eeb192bb9831f9eae12f1124f675e81786a9241fcdf8513779d7f3dafcd4c683e72246868ec1e198bcfdd36d68e26caae5263d29
-
SSDEEP
3072:8sDV6Az1lWgFvYGnJd/KpZV3uTN9WU/G9h3Gw590KqWbmzALbvl6:tQAKgFvYGJd/KpZV3uTN9WU/G9h2w591
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\734ff6e04a46e22422fef083ce5ce2c672e71244cfc883ca6c3ec9d995140860.exe"C:\Users\Admin\AppData\Local\Temp\734ff6e04a46e22422fef083ce5ce2c672e71244cfc883ca6c3ec9d995140860.exe"1⤵
- Checks computer location settings
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10.2MB