Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27/11/2022, 04:45
General
-
Target
caab8a741e14376c8571308d4fc183b4200b1391c6522114e52f0f1e6232ede9.exe
-
Size
489KB
-
MD5
5457df33bb53e779ec3ad4b287217f30
-
SHA1
eba73164d8577ff53357c20674ddfe64d1a1633e
-
SHA256
caab8a741e14376c8571308d4fc183b4200b1391c6522114e52f0f1e6232ede9
-
SHA512
db35a2ade22c6608601ca134dbfc4bf009660da37cf5cff70ffb64d2b1eb1dc4a010f54b739ee7a8c9ca5ed77db565bce8a20fb91b0ecb2e6883d5ad18920462
-
SSDEEP
12288:gWdow3buBm2F91pzSBAI21sq8gfCUJ++gdgc6JRHIVpgPwVmLxny:LdomCB17OBAF1sZMCk+zgJwV4hy
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\caab8a741e14376c8571308d4fc183b4200b1391c6522114e52f0f1e6232ede9.exe"C:\Users\Admin\AppData\Local\Temp\caab8a741e14376c8571308d4fc183b4200b1391c6522114e52f0f1e6232ede9.exe"1⤵