Analysis
-
max time kernel
177s -
max time network
188s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03-12-2022 10:08
General
-
Target
b775070eaccd6e952cb03142a6da6665b4307a57b5bb426b910fafe86d148c87.exe
-
Size
3.8MB
-
MD5
360a3eb8e10aecf41caddc8c026ebf4c
-
SHA1
872f75ecc140d9c27dcba8e21c3acc60b184b01b
-
SHA256
b775070eaccd6e952cb03142a6da6665b4307a57b5bb426b910fafe86d148c87
-
SHA512
d991ca4ca788b2d7aa3286de01ed60e26b72852c343ff1f247131e16c0e4d30285a3b49b237923c740b2688b87f964869f6f8e75522cde1d864f25a2261e9175
-
SSDEEP
98304:wlK+19VurjHneXNS1M6D2zM0BB347o55rpXEL:ydEUC43nfuL
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b775070eaccd6e952cb03142a6da6665b4307a57b5bb426b910fafe86d148c87.exe"C:\Users\Admin\AppData\Local\Temp\b775070eaccd6e952cb03142a6da6665b4307a57b5bb426b910fafe86d148c87.exe"1⤵