Analysis
-
max time kernel
368s -
max time network
445s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
29/11/2022, 08:51
General
-
Target
fefbea886c7cffe49657071bf024df2e47ec04333e12c275397640fed4552511.exe
-
Size
564KB
-
MD5
c237b43bb1c2a82355410c9c6c48185a
-
SHA1
2f32b7d776a4348dc87ddb8d3d5f5e8549314163
-
SHA256
fefbea886c7cffe49657071bf024df2e47ec04333e12c275397640fed4552511
-
SHA512
e04a36ea8272bdf1276022e7f177ebc435a2063c9641298da990ddc92467d05d43a93696ca2c59c144a8f125a4b278b111c2a8c130e89c48fff1374a81fd4b63
-
SSDEEP
12288:/GQlIdQ8lIglrNYlPGAHQlmKgGRPcIxWcOAl://IdQ8KglrNYltim/GRJx8Al
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\fefbea886c7cffe49657071bf024df2e47ec04333e12c275397640fed4552511.exe"C:\Users\Admin\AppData\Local\Temp\fefbea886c7cffe49657071bf024df2e47ec04333e12c275397640fed4552511.exe"1⤵