Analysis
-
max time kernel
91s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
29-11-2022 04:53
General
-
Target
97b0486c6c4df9d7a0a6279a4a63cc15b39214eeec056c31a947181b214572a4.exe
-
Size
16KB
-
MD5
5bfcfff25c52426a181a18f47506d898
-
SHA1
d3a06f464b7bd54351c3d15af53d1759ec7bcf39
-
SHA256
97b0486c6c4df9d7a0a6279a4a63cc15b39214eeec056c31a947181b214572a4
-
SHA512
b5790a99864b89c8b9882fcf66cba109eaafdf6df5a9e078ae6c4782802d1ff32cfa376ebc54185d7420b7c68a750b4e68fc8fd81d430da2923e39a4fc1a872a
-
SSDEEP
96:6r18mXdGLAiFqxyhAshxihDHPtboynu+:g8mXdGLAiYxVsXQP1oynu+
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Modifies registry class 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\97b0486c6c4df9d7a0a6279a4a63cc15b39214eeec056c31a947181b214572a4.exe"C:\Users\Admin\AppData\Local\Temp\97b0486c6c4df9d7a0a6279a4a63cc15b39214eeec056c31a947181b214572a4.exe"1⤵
- Drops file in Windows directory
- Modifies registry class