Analysis
-
max time kernel
191s -
max time network
218s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03/12/2022, 11:33
General
-
Target
ed1bc038a4a128a9c2b516d60519534b3ff07348ceaec2b5e7a017b93614a391.exe
-
Size
9.7MB
-
MD5
517dab9edb768573e7719ce4334ebe50
-
SHA1
b557fc7cb1cf918d476a5ad3511ca80f518714f4
-
SHA256
ed1bc038a4a128a9c2b516d60519534b3ff07348ceaec2b5e7a017b93614a391
-
SHA512
409033b7a82a8ba10d0353865ea96822f2a86098663663a7c0a14f6d64dae491e493a387a721347527db0d863bcaddc0843f89e4ab5599ecfdb6b5c2325dc5e8
-
SSDEEP
196608:3QKDShqRfxu1/Mb4xOadaRlLac5S/MBKhDVkKM:3Q1qh4A4xjAlGcA/tDVkV
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ed1bc038a4a128a9c2b516d60519534b3ff07348ceaec2b5e7a017b93614a391.exe"C:\Users\Admin\AppData\Local\Temp\ed1bc038a4a128a9c2b516d60519534b3ff07348ceaec2b5e7a017b93614a391.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4.5MB
-
Filesize
4.5MB