Analysis
-
max time kernel
294s -
max time network
346s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
27/11/2022, 18:53
General
-
Target
5ccddb06cdd904e37114a97b7a4d6185f24f2246e94f104d756d7fd0bdadc90f.exe
-
Size
347KB
-
MD5
502daf12627e84af1e91c9c6ea0805b0
-
SHA1
256b1606df8d2832ec3941624d551009abcc477b
-
SHA256
5ccddb06cdd904e37114a97b7a4d6185f24f2246e94f104d756d7fd0bdadc90f
-
SHA512
f09fcb8a6a1420ccd36875f212985b75c0abbf9503f679d1b7c5f39cdb1396627a2b5798ddd98816c348a6b31eb7a3e4963de160002b40af7c4ab0e5d27fa6b3
-
SSDEEP
6144:TEUXF46ZOAEcf7bjkjuFKEF1SApOKt+AV+YehBmrUKg2R5nc4oYaROqX8YHe:TEW4q533+EwktDreMUE7vo18j
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\5ccddb06cdd904e37114a97b7a4d6185f24f2246e94f104d756d7fd0bdadc90f.exe"C:\Users\Admin\AppData\Local\Temp\5ccddb06cdd904e37114a97b7a4d6185f24f2246e94f104d756d7fd0bdadc90f.exe"1⤵