Analysis
-
max time kernel
110s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
-
submitted
03/12/2022, 12:26
General
-
Target
dc5dbaec79a2b312d245de8e05efd500010a30279fbf4d1697cf5a5ee3a34373.exe
-
Size
2.0MB
-
MD5
8805c3027147835dad7825301e5c4f80
-
SHA1
953e1d83a216934c65257a0fc8a2561c7cf29e52
-
SHA256
dc5dbaec79a2b312d245de8e05efd500010a30279fbf4d1697cf5a5ee3a34373
-
SHA512
9f1c6102310485fb9ffa3a1da6997cb49b171134837d04631af77f70e2aa800d9beb71de52df7c3a3406eb85ac49065fc53dd3ad5a3303e7ff033ba0bafade86
-
SSDEEP
49152:hEdvDkYZ12B41MJsHKfOGzAIxve4DhNsBniKpfKynky0lu:hEZDkTNOyOGzAIxW44Bbncu
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dc5dbaec79a2b312d245de8e05efd500010a30279fbf4d1697cf5a5ee3a34373.exe"C:\Users\Admin\AppData\Local\Temp\dc5dbaec79a2b312d245de8e05efd500010a30279fbf4d1697cf5a5ee3a34373.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
1.5MB
-
Filesize
1.5MB