Analysis
-
max time kernel
155s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29/11/2022, 08:47
General
-
Target
1e38d62b6241c59a257ac0db17048dabd3c4ed133f3497d1cfbfd6195cb1330e.exe
-
Size
141KB
-
MD5
f6dfc809d0deeb152b2d84888742e62f
-
SHA1
a1062bc364e62316c35c6261da6de3bf8753bb3d
-
SHA256
1e38d62b6241c59a257ac0db17048dabd3c4ed133f3497d1cfbfd6195cb1330e
-
SHA512
fbbc997a7314d5438b8430e5b0482b219fd74e051ed6804157ca534187399e3333865b9f110da91a2f3f9e33ae2ef155cb4253b153096d515356f5d017803459
-
SSDEEP
3072:eqd3UeAPWgMtoYRaq1so6IC737dhbKoCi08E9UqLCUqoq6F:e4E3PW7yqiIC73XEiXE9UtUU6F
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1e38d62b6241c59a257ac0db17048dabd3c4ed133f3497d1cfbfd6195cb1330e.exe"C:\Users\Admin\AppData\Local\Temp\1e38d62b6241c59a257ac0db17048dabd3c4ed133f3497d1cfbfd6195cb1330e.exe"1⤵