Analysis
-
max time kernel
173s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
24-11-2022 04:06
General
-
Target
abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe
-
Size
161KB
-
MD5
009882e3abc9ca73702d7bd595df1c1b
-
SHA1
1b5525a9284f3aa80aa817673eda569f384332f4
-
SHA256
abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a
-
SHA512
d5baf2320b4de7fd3467bc8e8e33ee10b27e81c8e2e244229f51a09d5d60aa87aa735b6e6ad27b79c53df551c00860500aca67e344447e3999f2f95d48f651dd
-
SSDEEP
1536:9+aQc1w4vuFvJhEem+be0Dy6LtauashKELcVQMj1Ix86ryNFhf9Eoki7S:4a77v0JhE4Dy6LtauaIEhjs7Qv6
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe"C:\Users\Admin\AppData\Local\Temp\abead50ffd0f985bd5a0ff185e7358e417ac973b49b4827524718bccbe2e116a.exe"1⤵