Analysis
-
max time kernel
154s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
30-11-2022 17:40
General
-
Target
6d4e4528a1cb3af656e84e74dab6731c2d80f2e57f95ca865ba3a0628207a673.exe
-
Size
964KB
-
MD5
f817bc5a13f0f7ffe8652f86dc0ce55f
-
SHA1
0f2d30796f411da74a3af083966bad88f4a3a326
-
SHA256
6d4e4528a1cb3af656e84e74dab6731c2d80f2e57f95ca865ba3a0628207a673
-
SHA512
5d09e4adcdf7a2a73972433b89021e702e08882ada4a536fbdb92c8fa492193822fcd8655003a2dfdf38840ebdba065b9f12cb6a3df5deab5ca2dc6c9fa533c2
-
SSDEEP
12288:q+6L7SIHNcIPaYJPaSiMae7TT4JwH/CW4yaWJSt:qZXbtc8aYJySiiPkSfC+f
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6d4e4528a1cb3af656e84e74dab6731c2d80f2e57f95ca865ba3a0628207a673.exe"C:\Users\Admin\AppData\Local\Temp\6d4e4528a1cb3af656e84e74dab6731c2d80f2e57f95ca865ba3a0628207a673.exe"1⤵
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1308-132-0x0000000000B00000-0x0000000000BF8000-memory.dmpFilesize
992KB
-
memory/1308-133-0x00000000055B0000-0x000000000564C000-memory.dmpFilesize
624KB
-
memory/1308-134-0x0000000005C00000-0x00000000061A4000-memory.dmpFilesize
5.6MB
-
memory/1308-135-0x00000000056F0000-0x0000000005782000-memory.dmpFilesize
584KB
-
memory/1308-136-0x00000000056C0000-0x00000000056CA000-memory.dmpFilesize
40KB
-
memory/1308-137-0x0000000005B30000-0x0000000005B86000-memory.dmpFilesize
344KB