Analysis
-
max time kernel
166s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 00:10
General
-
Target
a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe
-
Size
4.0MB
-
MD5
b3dd813106729b6f99c66c338423da77
-
SHA1
dbf707f4890f025ce75b44a7110914a9bed6c514
-
SHA256
a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f
-
SHA512
a9c131ed67432ec7dbee86b4910effd7bcf72811b160f6b56ca278aa266d61a39b4d3fe12fce62dde49d673de22b2ab56c1307bc9bea2c54e4c5d6ecb50a23ed
-
SSDEEP
98304:bD0mA20c/x7TSL0Wt9KvW8lAm4rK2yb9RS6xVa9b64Eb1MLda9Zw8H5:bD3z0mBTutcOSAm4rcb9da9bTY1px5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe"C:\Users\Admin\AppData\Local\Temp\a7514333566853e15fc5a990236c39cca79aba9b64a30fff29544bad7261f26f.exe"1⤵