Analysis
-
max time kernel
148s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
24-11-2022 00:11
General
-
Target
2ecf50bb0ee15217df6cefdac4ec1bc6df48c5970149a02c62ff2fd6a38aef08.exe
-
Size
1.5MB
-
MD5
5b14ebdd8e5baf9a420e1fea6aeab797
-
SHA1
5f8b870e05279a5383ec83f47b2644fe02767e15
-
SHA256
2ecf50bb0ee15217df6cefdac4ec1bc6df48c5970149a02c62ff2fd6a38aef08
-
SHA512
8af47e6aad81c213a39f8cd371c30c1339eca4389e9925121a92850bfdaa960b880dcb775a68647adca2a6e591941b0138f08acdd7fa59f6d0538427bcd80a9d
-
SSDEEP
49152:zPJF0mA20f0EuxSCtnJ3b/KhBL0Wtb9BYvs58lFenm6:bD0mA20c/x7TSL0Wt9KvW8lAm6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2ecf50bb0ee15217df6cefdac4ec1bc6df48c5970149a02c62ff2fd6a38aef08.exe"C:\Users\Admin\AppData\Local\Temp\2ecf50bb0ee15217df6cefdac4ec1bc6df48c5970149a02c62ff2fd6a38aef08.exe"1⤵