Analysis
-
max time kernel
429s -
max time network
393s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
25-11-2022 19:27
General
-
Target
006442167af9a5b541a03a9a04d469771e6e2fd6c41de136d0434364a376ac0f.exe
-
Size
2.3MB
-
MD5
45a76b40dcb90c591cde9a8f3fa6d96d
-
SHA1
4ad9657af3bf5d5bef4f1c0973a8e7e7c4e9e1f8
-
SHA256
006442167af9a5b541a03a9a04d469771e6e2fd6c41de136d0434364a376ac0f
-
SHA512
3207441c5fb8d66658872a0efb647d44a6f866fc5119b5207884c8b00b6ab8b1e2da10263b0d2013206058c48e18c6ab4000b10ae02e4ba3650ed18a7addc608
-
SSDEEP
49152:Kdkt1apJNi6M2jYH/5Cnro7wpSVu9ISwwWvRw5XkHa6IoBA0sfG:bag52jYHgswoUIRGaamAlfG
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\006442167af9a5b541a03a9a04d469771e6e2fd6c41de136d0434364a376ac0f.exe"C:\Users\Admin\AppData\Local\Temp\006442167af9a5b541a03a9a04d469771e6e2fd6c41de136d0434364a376ac0f.exe"1⤵