Analysis
-
max time kernel
148s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 00:10
General
-
Target
b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe
-
Size
3.0MB
-
MD5
4c53a7cfaaeed8384213d2b150a74438
-
SHA1
5cbd35badf3142bf59d62d99c88b40fa0f400b3f
-
SHA256
b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605
-
SHA512
9b92552464371f97a3c2aa55ba7ab325f9a95bcc2703929e5a4c9e40ba0479bde922ca477a1b5ee0f0fd9bfa5ffc2682b28286b0a76a29325456f6f22a47a5a0
-
SSDEEP
49152:KruR0auxftp+MuQF19MhjYmcS6skDipTR8hOrvuFn6+YudUZ:uf9wMuyMeA61hOr2F6+NeZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe"C:\Users\Admin\AppData\Local\Temp\b2b24d5296dd650ca4aa049c4f4ae19736f3bea0052ac8129e511f87e16c0605.exe"1⤵