Analysis
-
max time kernel
141s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02-12-2022 21:39
General
-
Target
b8ab6ad8169c6f148b3091a5f74315b951c9e8666631bc4a80eab2af2aa3a681.exe
-
Size
467KB
-
MD5
fdd1984abb00f00f6cb76d9929838730
-
SHA1
a8d3d12dbb4502aefd072cb0c10662dcd912117b
-
SHA256
b8ab6ad8169c6f148b3091a5f74315b951c9e8666631bc4a80eab2af2aa3a681
-
SHA512
1e555dbbcbf2984a3d33877c94ffc7b40aba7d0278bdbb657571e81d2c64358f0d4f2b1dc777321b22fa2a163c90abec634a238d4d9dda1432e5d53948189650
-
SSDEEP
6144:txDa3MUwoJ8SLWSlhPGpBL8RRn5SaT21G4oyJmDLB1YYMRxoc0Y2pcsL:YMUwoJ8SiqPEB7U2E4oyJmvBMRrVO
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b8ab6ad8169c6f148b3091a5f74315b951c9e8666631bc4a80eab2af2aa3a681.exe"C:\Users\Admin\AppData\Local\Temp\b8ab6ad8169c6f148b3091a5f74315b951c9e8666631bc4a80eab2af2aa3a681.exe"1⤵