Analysis
-
max time kernel
146s -
max time network
163s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 10:46
General
-
Target
eb1588a4579c970c982e09c7bc6e202dbf062f258c34631c4cf35177ba02fb56.exe
-
Size
5.4MB
-
MD5
24bb41007d043046118613ec65190b6c
-
SHA1
b9acb93636e07a80cd31fb76aa6732c2228d0c7f
-
SHA256
eb1588a4579c970c982e09c7bc6e202dbf062f258c34631c4cf35177ba02fb56
-
SHA512
19cbe3eef1953d05ef145d9ea29e5ddbd51feaa63e2d1e4f92c44457b70796fb9eb74223ecaec6adc816b0f9a1dabe10518721b55b210c650c84e05d5225dfe4
-
SSDEEP
98304:fziEg2WW58QRtdVuTfYxswwptSzioqUrH:LiU8OzVuzKct+qUrH
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\eb1588a4579c970c982e09c7bc6e202dbf062f258c34631c4cf35177ba02fb56.exe"C:\Users\Admin\AppData\Local\Temp\eb1588a4579c970c982e09c7bc6e202dbf062f258c34631c4cf35177ba02fb56.exe"1⤵