Analysis
-
max time kernel
147s -
max time network
171s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
25/11/2022, 18:47
General
-
Target
热血无赖修改器2+1黑暗版.exe
-
Size
2.3MB
-
MD5
ac5d85c0a47dcebcb1d355a6b344cb1e
-
SHA1
863cf6b695fe0fea35dd31b1442b626b618c77b1
-
SHA256
f189b9edc98ccb46210c30e045b4277170ee203e3af07bb795cac36c70741195
-
SHA512
91e998ea582c22269ee2bf0b1d89821cc211a7eeb2455c0172e7d2e20d9fa460114adbdbe87a88b612f5ca51892a856a20def795ae8e61d10dc205bab2b2ff09
-
SSDEEP
49152:LRR6b37nrjFvjuGeaD6hwGyRBa/6Cuf68XHXoFBtCvt/6fbuH9mqVeP:NRsLVJecswGyRY6D68XX4BtwyfKH9tVe
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\热血无赖修改器2+1黑暗版.exe"C:\Users\Admin\AppData\Local\Temp\热血无赖修改器2+1黑暗版.exe"1⤵