Analysis
-
max time kernel
203s -
max time network
221s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
23-11-2022 20:57
General
-
Target
50c1a928d78cc86c066f5129eee16652d6a0f3a1eec9d9a322ab602f9f787814.exe
-
Size
173KB
-
MD5
4a4187e14f248d025adeaae48ebcaa72
-
SHA1
70e18681cb8a7a861986c5bac7de352a05eda9f8
-
SHA256
50c1a928d78cc86c066f5129eee16652d6a0f3a1eec9d9a322ab602f9f787814
-
SHA512
f17695711d34f590140e722ff941a6844c924a0abf2e71ae58df211b0486cba0d039535435228e5a4dd1145a5071c70c920ee3c31429bf95d92f74aa9924636a
-
SSDEEP
3072:Kp8l05FyX0mpa4ZJJc5JUDgS6Ob3OGXIyjLeigj8vp0+1rlw3eHMIrBj22+KxS3Y:KCl05Yc8aUrN6GXIki3ovp0+FS3eHMIx
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\50c1a928d78cc86c066f5129eee16652d6a0f3a1eec9d9a322ab602f9f787814.exe"C:\Users\Admin\AppData\Local\Temp\50c1a928d78cc86c066f5129eee16652d6a0f3a1eec9d9a322ab602f9f787814.exe"1⤵