Analysis
-
max time kernel
150s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01-12-2022 10:42
General
-
Target
a1fb9295e18211bc2c527dffa792b3b54d23e7d9e65e70bbb4e3d25563482e81.exe
-
Size
1.7MB
-
MD5
30f51801540205082b7de656892e25c1
-
SHA1
49ab51fd81796ce7504adec703ea5fe7860ce4d1
-
SHA256
a1fb9295e18211bc2c527dffa792b3b54d23e7d9e65e70bbb4e3d25563482e81
-
SHA512
f462ff507ae558258c2f80365ca7699112ae677af70d8633deb76f7811e85cbed20f7bb351be49c4ae6d3b25d59deaaf9131123a3c7fe2ba75f554eba7497512
-
SSDEEP
49152:Ycy52F1BZTXGvtS05ElScIzyv+QTvG31v4sR11pJ:YccvtStIcP9bIvxVb
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a1fb9295e18211bc2c527dffa792b3b54d23e7d9e65e70bbb4e3d25563482e81.exe"C:\Users\Admin\AppData\Local\Temp\a1fb9295e18211bc2c527dffa792b3b54d23e7d9e65e70bbb4e3d25563482e81.exe"1⤵