Analysis
-
max time kernel
182s -
max time network
197s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03-12-2022 05:38
General
-
Target
d0ad57dd6d9aef825f8adc278860048a4fd311b0c337e42abdbef93c7ae9190d.exe
-
Size
87KB
-
MD5
d91d3dfa29ad70e6e00d60a92fa218f7
-
SHA1
ee42b85698a5d3b2196550bfd5788267f7c9d63a
-
SHA256
d0ad57dd6d9aef825f8adc278860048a4fd311b0c337e42abdbef93c7ae9190d
-
SHA512
8aa360d0dc1d9c2186881c269e06932fc9542026c4fa1f034cd0065280c16de820c538b6e755c9ca325370057389fc2c8ccaac4149c9022ab778cfd96253a27a
-
SSDEEP
1536:zPx/CJAmx2/W5Ebnto4tmJ/xm+nfCzNWMKqzRZYRRJCT:bx6UW6tpmJJXCzNWMKKRZYcT
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d0ad57dd6d9aef825f8adc278860048a4fd311b0c337e42abdbef93c7ae9190d.exe"C:\Users\Admin\AppData\Local\Temp\d0ad57dd6d9aef825f8adc278860048a4fd311b0c337e42abdbef93c7ae9190d.exe"1⤵