Analysis
-
max time kernel
185s -
max time network
228s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
27/11/2022, 18:34
General
-
Target
da3891424f5ad1510fc3739b4ba57e1a044cfe48e3228babfa66bfae14372862.exe
-
Size
13.1MB
-
MD5
0aed28a4d202a8ca389748e3f5ae1e79
-
SHA1
6d7cd0ac0a3ee91f5f6edfac81b1ae4e50d64ac6
-
SHA256
da3891424f5ad1510fc3739b4ba57e1a044cfe48e3228babfa66bfae14372862
-
SHA512
d6bc27966cd8b3d293f981a607aec5eb2ff08f4f593eac13d19726fa33c7e1d442fe4004cc8504f4d44ef436337beba7e8bfb9e59e5db79b389ec3332aef7216
-
SSDEEP
393216:mvrQjlv9hOJeywch9ZwTtjT0EXRh+nmLlfvrjePYP3:mvrcETwZv0QOAfOAv
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\da3891424f5ad1510fc3739b4ba57e1a044cfe48e3228babfa66bfae14372862.exe"C:\Users\Admin\AppData\Local\Temp\da3891424f5ad1510fc3739b4ba57e1a044cfe48e3228babfa66bfae14372862.exe"1⤵