Analysis
-
max time kernel
137s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01-12-2022 21:39
General
-
Target
88cee508db50387e3c8e86c0266d7d5033fad9bb1976bd0b31fbd535b7995e09.exe
-
Size
116KB
-
MD5
ec9e2cca2c2005f3416eb2942eb247dc
-
SHA1
e2a2678dc386f3019858696af30fc852649b96f5
-
SHA256
88cee508db50387e3c8e86c0266d7d5033fad9bb1976bd0b31fbd535b7995e09
-
SHA512
741fb144bd7faa81ecbeaf8d3ee33dc9941076636aa72128023f00851efa5085a540d8cffe297710b22871368872142b0f0b62806ca0d7a2d2b7a2e425db2082
-
SSDEEP
3072:lmBwoVeHgChFvnLx4gEC+YctqiAbwFkbnGWFt/2lm+:lk8HnhxZqevb3FQlJ
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\88cee508db50387e3c8e86c0266d7d5033fad9bb1976bd0b31fbd535b7995e09.exe"C:\Users\Admin\AppData\Local\Temp\88cee508db50387e3c8e86c0266d7d5033fad9bb1976bd0b31fbd535b7995e09.exe"1⤵
- Drops file in System32 directory
- Suspicious use of SetWindowsHookEx