Analysis
-
max time kernel
168s -
max time network
177s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27-11-2022 08:45
General
-
Target
9f12dbcdfc5f6fa4abb2ea25a4868056a302c7c1e6bf3732fe46049d69422b38.exe
-
Size
10.4MB
-
MD5
3e0ff1b582278cb433e210c18ff27de1
-
SHA1
4b415eb2b3790876ada225464db1b3f837d4f792
-
SHA256
9f12dbcdfc5f6fa4abb2ea25a4868056a302c7c1e6bf3732fe46049d69422b38
-
SHA512
ded1d6aac47b2e3b5a8bc9d19bb0d5db157a931c9b28da43a38e79b7e7d36b41ca3bc22e3b0c713d1691ed1b52dae395376983ed600a5550197cec655a7a240f
-
SSDEEP
196608:s0uv6oLnb/eQY6kAfdd2RJHzRh/xusE6dIyLovNzUo0+ZbUAJ29tU5o3bYV61V:s7XY6kAn+JTRh/xusE0IRVAoLZI0QC5c
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\9f12dbcdfc5f6fa4abb2ea25a4868056a302c7c1e6bf3732fe46049d69422b38.exe"C:\Users\Admin\AppData\Local\Temp\9f12dbcdfc5f6fa4abb2ea25a4868056a302c7c1e6bf3732fe46049d69422b38.exe"1⤵