Analysis
-
max time kernel
273s -
max time network
267s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27/11/2022, 12:22
General
-
Target
d57b59daf57b2408b5e68b028713ba7be4a5004578466338f25ca52872f265f5.exe
-
Size
2.0MB
-
MD5
07b21c9a766ffa98422a383aec34b8f1
-
SHA1
77e3a30d81052f572139d7315d9aca87e086aefc
-
SHA256
d57b59daf57b2408b5e68b028713ba7be4a5004578466338f25ca52872f265f5
-
SHA512
cc12667b5a92600d9a24cd05f866450a1aafd95078293edd7372d5800d8609c72590b7a65b466a8b2a81ac8af7450ce00f62cefbb49c726f4b6572b50d307ecc
-
SSDEEP
49152:BdTEy8G1nUex2QzO3p3fuROlWsPJAQRCBHwZpwVxdTE1:BdT3pIkOWsBOsaxdTu
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d57b59daf57b2408b5e68b028713ba7be4a5004578466338f25ca52872f265f5.exe"C:\Users\Admin\AppData\Local\Temp\d57b59daf57b2408b5e68b028713ba7be4a5004578466338f25ca52872f265f5.exe"1⤵