Analysis
-
max time kernel
150s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
01-12-2022 20:31
General
-
Target
c1d812501b0aad734e9cefe1cd3d751c17e39119c55b21a764c61ef91710fe48.exe
-
Size
151KB
-
MD5
91cdb065be6635fccc94a1ba0496b890
-
SHA1
59a69b8257bc1ccda9c0ad51574002f76cbf01b2
-
SHA256
c1d812501b0aad734e9cefe1cd3d751c17e39119c55b21a764c61ef91710fe48
-
SHA512
a3212739c66c645d1210b99ea358d79e5e9bd6e1aaa1bebd07e85d8f9671e10cc07ccf7e613bcf6631e65e66ec4ef4a3b8ca0f07f698c93f13632b4ed02f6800
-
SSDEEP
1536:tjmS7uQiR7abLJqiX0DImJr0HQPkHFR+69Qdkkn37twe3LpQ4OxSgiZ9tNnga4iI:tjhhbyDImJXPkHFR+6GtwwFphru
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c1d812501b0aad734e9cefe1cd3d751c17e39119c55b21a764c61ef91710fe48.exe"C:\Users\Admin\AppData\Local\Temp\c1d812501b0aad734e9cefe1cd3d751c17e39119c55b21a764c61ef91710fe48.exe"1⤵