Analysis
-
max time kernel
271s -
max time network
293s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25/11/2022, 10:58
General
-
Target
0e0717d2f12fd097e7f535679c8761b7b074057661665dcf7788deaa91902616.exe
-
Size
1.5MB
-
MD5
c226c465911a791e6a6a1fa84427e625
-
SHA1
3085ff35b0dfba45bef2d5bc8bd683f5e941a590
-
SHA256
0e0717d2f12fd097e7f535679c8761b7b074057661665dcf7788deaa91902616
-
SHA512
e82fe6abcdac5aba589c0fa0a21076b3d8e503f244d89b8f6de4aa97e61fb99043c9bc321ae9ed268c414fa85c8817af52711bce32647626b582a9ca1c10da3e
-
SSDEEP
24576:Hpa/O74CNt3r2J2FC3eUldZUJ3OlKU4UDcc6Cy+9eGY:wcZC35VcOcmDcc6Cd2
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\0e0717d2f12fd097e7f535679c8761b7b074057661665dcf7788deaa91902616.exe"C:\Users\Admin\AppData\Local\Temp\0e0717d2f12fd097e7f535679c8761b7b074057661665dcf7788deaa91902616.exe"1⤵