Analysis
-
max time kernel
189s -
max time network
191s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
02/12/2022, 17:54
General
-
Target
96f0435ea63d1facd41142f14952472c460c1cef0bf472e87d9371c786a32a5f.exe
-
Size
1.8MB
-
MD5
c06423ae3d4d088efa1e1cae3285d191
-
SHA1
8f9c0f5ffa820e6fd868083d3173edd02ae7325d
-
SHA256
96f0435ea63d1facd41142f14952472c460c1cef0bf472e87d9371c786a32a5f
-
SHA512
47c135ce6e7d0797b9478d10e80e15d8073fd1f858234f12d00a7b8f456660aa94039e843fa8768cbec8d47579982cde1bd239685458b9ee8630fbafe3abe3af
-
SSDEEP
49152:eHXZSbQxPFGzCcot3LT6HyBIeNVh8hsquPKWuCK:eHXQQxPFeot3HIeNV+sqGuP
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\96f0435ea63d1facd41142f14952472c460c1cef0bf472e87d9371c786a32a5f.exe"C:\Users\Admin\AppData\Local\Temp\96f0435ea63d1facd41142f14952472c460c1cef0bf472e87d9371c786a32a5f.exe"1⤵