Analysis
-
max time kernel
121s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
-
submitted
02-12-2022 21:42
General
-
Target
87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe
-
Size
889KB
-
MD5
cb85654e961d3626da57dbbf4019cde2
-
SHA1
022cdea4f664a5f0d7e910551f7b972765e10c26
-
SHA256
87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb
-
SHA512
05f584437b52d75e9dcb089f6b7f8927081601f2c8433f2fd8587a5dbe197405c7bac11c9fcb550ff6c78a97a8f1b0face51b7827ce366fc1194e4f199db9b0a
-
SSDEEP
24576:uRv5H3WYLiysdgZHm0luUKBCyKdszKeukot7slmt:chmU0adxlujBedszKBkodNt
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe"C:\Users\Admin\AppData\Local\Temp\87f38b8d34b66cc8d7f62942df0a0f18de1186fe3fc95bc569b1bb288b8d62cb.exe"1⤵