Analysis
-
max time kernel
174s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01-12-2022 05:32
General
-
Target
2616f924ffe3289117282fbc59acdb0db1c45e518f9655d73ec959c721a924ff.exe
-
Size
3.3MB
-
MD5
d6be0528c6cae460259752216c3bff42
-
SHA1
db7b5818344a76f262a7796df29be898f8bb453f
-
SHA256
2616f924ffe3289117282fbc59acdb0db1c45e518f9655d73ec959c721a924ff
-
SHA512
c1954fe76baa3c9ddafc084f2df707bccef8722650ccaea26c299ebdf35525b6bf354e2593c29942470d6e147855c65c6fb80ea00e1213e6f0be82b642d9cab4
-
SSDEEP
49152:GtAGLeZTQEtbVdCrdQzDufwc2HebUPQBoxfbXRsiviAQjmt+ze62F8bovQqsISn6:OAGq5QEt9sW0yF2V/FzKcDwZ
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\2616f924ffe3289117282fbc59acdb0db1c45e518f9655d73ec959c721a924ff.exe"C:\Users\Admin\AppData\Local\Temp\2616f924ffe3289117282fbc59acdb0db1c45e518f9655d73ec959c721a924ff.exe"1⤵