Analysis
-
max time kernel
172s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 00:10
General
-
Target
c542e1378a825bba2b759314bb627faebffc0fbc02b436dafd9403be2fb0f217.exe
-
Size
3.2MB
-
MD5
55afdbe652153e769f2b422d1ff9d7cc
-
SHA1
aef5270e224e00b02b2b4407af1bbbf8ce2a9651
-
SHA256
c542e1378a825bba2b759314bb627faebffc0fbc02b436dafd9403be2fb0f217
-
SHA512
1d49784420b154ff6953caf018c32713e2c7a4232932f9f1f09720c030e0c6d7c5915ca46ee5e8bd1ea4341666ecfd456ed0285460522fe935ff57bcfc153f32
-
SSDEEP
98304:bD0mA20c/x7TSL0Wt9KvW8lAm4rK2yb9RS6xVa9b6S:bD3z0mBTutcOSAm4rcb9da9bL
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c542e1378a825bba2b759314bb627faebffc0fbc02b436dafd9403be2fb0f217.exe"C:\Users\Admin\AppData\Local\Temp\c542e1378a825bba2b759314bb627faebffc0fbc02b436dafd9403be2fb0f217.exe"1⤵