Analysis
-
max time kernel
179s -
max time network
194s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03/12/2022, 14:32
General
-
Target
c8d3165f14de970afb608b2bcc669280ebc187928f7431058bf11c782f5d7c90.exe
-
Size
1.3MB
-
MD5
6c7996ef3a5f99c879752558236a2122
-
SHA1
272a5d453d9bfb3e48f8970d8d756d0b244fda81
-
SHA256
c8d3165f14de970afb608b2bcc669280ebc187928f7431058bf11c782f5d7c90
-
SHA512
63b3b2c6be6c006d109736e5d3910bf59da8df7eacf896e7ec6a0e815d5bed1f246ca2b489c176db791191c016b6f893a47f5311e152f49085c75dc5364faebf
-
SSDEEP
24576:6T4UlBwfu4IS1T1xT17lDys7vNnYGNP1Iqd48+RLQ+uJ1pJE+XdtwROPGEIwxIpD:eCfub4nT17lms7VYA9vdARLmxE+XIROm
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\c8d3165f14de970afb608b2bcc669280ebc187928f7431058bf11c782f5d7c90.exe"C:\Users\Admin\AppData\Local\Temp\c8d3165f14de970afb608b2bcc669280ebc187928f7431058bf11c782f5d7c90.exe"1⤵