Analysis
-
max time kernel
199s -
max time network
227s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27/11/2022, 03:33
General
-
Target
184dde16421991b161416abddb8e23d955274c7ecb8ba15d7ec14bb6c4b7849d.exe
-
Size
207KB
-
MD5
c3c888c6ca0fac0c80b765df742e3bcd
-
SHA1
bb2c822be8385b809a71d8a9340acd58a499e0bb
-
SHA256
184dde16421991b161416abddb8e23d955274c7ecb8ba15d7ec14bb6c4b7849d
-
SHA512
c0484719f44771f859510d5fc093924f1151e11972c2e2d580aeea23a59ddffccfba0bdd8e8c4e62656d5ab81e1391bb0d64919cb7fdbfd4b2dbdb06a4b9060b
-
SSDEEP
6144:WQqhVh9hgljWkQFw4RIlXGk2oqh9QJN74wyw:GVRgCF5IBl2o5Jd4g
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\184dde16421991b161416abddb8e23d955274c7ecb8ba15d7ec14bb6c4b7849d.exe"C:\Users\Admin\AppData\Local\Temp\184dde16421991b161416abddb8e23d955274c7ecb8ba15d7ec14bb6c4b7849d.exe"1⤵