Analysis
-
max time kernel
158s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
29/11/2022, 08:10
General
-
Target
258ff1ec1860c5c9c4029152c47cb8dce9a4cd6f478ef3a44a0c03c2d2841217.exe
-
Size
3.6MB
-
MD5
c2adee8ec59477f41fe3fb50c625ee24
-
SHA1
da3e77bc2c161fc43879d1c9b37ad6e018642f9b
-
SHA256
258ff1ec1860c5c9c4029152c47cb8dce9a4cd6f478ef3a44a0c03c2d2841217
-
SHA512
c6126dbbeb2fd7f813a3577b697d9cfa635dffdb7ddd24bdae3d6906c7f4a7ce59bc83d83d8d05794a92ecf6f18dbc35543d5557856992732341f745814f41cb
-
SSDEEP
98304:8NCDYiKvCpNDkX4c4e8ez4paBcxaUBbW4r:4kK6c4Djpau9pr
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\258ff1ec1860c5c9c4029152c47cb8dce9a4cd6f478ef3a44a0c03c2d2841217.exe"C:\Users\Admin\AppData\Local\Temp\258ff1ec1860c5c9c4029152c47cb8dce9a4cd6f478ef3a44a0c03c2d2841217.exe"1⤵
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB
-
Filesize
3.2MB