Analysis
-
max time kernel
143s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
24-11-2022 13:39
General
-
Target
11d63c8ba185387a82b9d78c6d37218bff8f578641e4589f0fedff93db61d314.exe
-
Size
18KB
-
MD5
ccb2f899010de04126e2e0d45fa77c3e
-
SHA1
a1d118cfd8ae4665c34587df45c2220b176cb7e6
-
SHA256
11d63c8ba185387a82b9d78c6d37218bff8f578641e4589f0fedff93db61d314
-
SHA512
589bcc349be86969fdd466b7e5a3d3aae5010f06c591ecd024f980cf139d4dcf3c7606aefc8ae7ff79e06048ceb3db9e1073324fcf75570fcbcfe68011f85e7e
-
SSDEEP
384:ARdCy1MqlWM4mQ2eJlSFuKZNExpmXBaOD+:kCyCqlP4mQ/Dsu88OS
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\11d63c8ba185387a82b9d78c6d37218bff8f578641e4589f0fedff93db61d314.exe"C:\Users\Admin\AppData\Local\Temp\11d63c8ba185387a82b9d78c6d37218bff8f578641e4589f0fedff93db61d314.exe"1⤵