Analysis
-
max time kernel
175s -
max time network
193s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01/12/2022, 19:34
General
-
Target
f1530b2241fcc16fb6ffd7b5b5244180ec7eb1fae78480db307e30406dfc7a26.exe
-
Size
2.2MB
-
MD5
ada8d65a582e08ee067ecd4b3445ee28
-
SHA1
b707d86a0b1af226f5b100599fc526b3b57ab0b4
-
SHA256
f1530b2241fcc16fb6ffd7b5b5244180ec7eb1fae78480db307e30406dfc7a26
-
SHA512
9c97da6c3235055913cd24a5c66dd68d31924b48569a231fc191e2b1cf2f52558236284e67fc1c23de956e01b784b7dc52b7a42d3cace3e71c4abebd180fe95e
-
SSDEEP
49152:496i+M5ypT0v9TrdFmrMbGKC43J8r0+T/64wHi/aB3LDTrOE:4NYpT0v9TBFQqGK+YG/mcuLPCE
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\f1530b2241fcc16fb6ffd7b5b5244180ec7eb1fae78480db307e30406dfc7a26.exe"C:\Users\Admin\AppData\Local\Temp\f1530b2241fcc16fb6ffd7b5b5244180ec7eb1fae78480db307e30406dfc7a26.exe"1⤵