Analysis
-
max time kernel
204s -
max time network
207s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
02/12/2022, 22:11
General
-
Target
1d6ad9dbbbd69874fbe47f5ea9bd4e05d948c3d5e6e94c6141c4fed136ddca48.exe
-
Size
433KB
-
MD5
c7c18d58d7e293d021b3bdbfcbae2939
-
SHA1
931c558a22f4573cabf6e4b9626efb5f5d72c62b
-
SHA256
1d6ad9dbbbd69874fbe47f5ea9bd4e05d948c3d5e6e94c6141c4fed136ddca48
-
SHA512
bcbb18649c789ce0c7c3ba1489b415299380d12b353fb8f5d2f2883172ffe621bb86b89c31fcdf4c8362d4fb5492fe677f680cc096b092de09df2477cdb34500
-
SSDEEP
12288:YuGT4UN3K3vQTbm5zmkWOdHV/rvBzJEi9D8+s:iT4UlB4nX5v8i9QB
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\1d6ad9dbbbd69874fbe47f5ea9bd4e05d948c3d5e6e94c6141c4fed136ddca48.exe"C:\Users\Admin\AppData\Local\Temp\1d6ad9dbbbd69874fbe47f5ea9bd4e05d948c3d5e6e94c6141c4fed136ddca48.exe"1⤵