Analysis
-
max time kernel
156s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
02/12/2022, 23:29
General
-
Target
99262a99d041b819190413c34ca9259c708163d0ba6d8dd07b101982dac30fc2.exe
-
Size
115KB
-
MD5
1e96de606491387a8c21fb5136f766bc
-
SHA1
50d7566f241d71e0929b799672228da818a9cd2a
-
SHA256
99262a99d041b819190413c34ca9259c708163d0ba6d8dd07b101982dac30fc2
-
SHA512
af432a17328eb53e1bbf5b5af76e99c4fa09352b328a7e31b576885ee214c503099170386835304ddd842bbc5df1c07956e949b964149fe1a63410e9c0e45f16
-
SSDEEP
3072:ugXdZt9P6D3XJ7MnOa1uahrPAvm+RqQyqnw59lWDTpWSSNa:ue34GOa1uUqbqcyl0pWlNa
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\99262a99d041b819190413c34ca9259c708163d0ba6d8dd07b101982dac30fc2.exe"C:\Users\Admin\AppData\Local\Temp\99262a99d041b819190413c34ca9259c708163d0ba6d8dd07b101982dac30fc2.exe"1⤵