Analysis
-
max time kernel
190s -
max time network
214s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
01-12-2022 11:55
General
-
Target
6264e7935fb23fb5c51f0bf84c1e69df4b10ecf7b09c821acd27b68560e43990.exe
-
Size
129KB
-
MD5
01def96c1a3fc2722938ba28c2efb586
-
SHA1
c2cf1238746cd74d65984361090960837bd060d4
-
SHA256
6264e7935fb23fb5c51f0bf84c1e69df4b10ecf7b09c821acd27b68560e43990
-
SHA512
51767fcc0578041623ac02d4db69ff2aba84a57b021cea11665f6bee355a594bde7eadb6ad01a54879f6bd197bf382e7192cd78e36fc5ccf739a74784b669ff3
-
SSDEEP
3072:jx6UW6tpmJb7qjw/z1wMUalJYaR/RjbMxnEpBghKty:jxDI7qjQbVnP9VbYkgsty
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\6264e7935fb23fb5c51f0bf84c1e69df4b10ecf7b09c821acd27b68560e43990.exe"C:\Users\Admin\AppData\Local\Temp\6264e7935fb23fb5c51f0bf84c1e69df4b10ecf7b09c821acd27b68560e43990.exe"1⤵