Analysis
-
max time kernel
193s -
max time network
218s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
03-12-2022 15:16
General
-
Target
a6cadcd9abc3d67a7a4452ec56b2ce9e078897adf895e74dae01a894a884b371.exe
-
Size
92KB
-
MD5
24ec1390cb016b65f976156af5c1fe30
-
SHA1
677a6fb8e369537f40612c47c8ded84cd6f0d683
-
SHA256
a6cadcd9abc3d67a7a4452ec56b2ce9e078897adf895e74dae01a894a884b371
-
SHA512
1bfb24178a13fff0e4d4f8e5d12060417fb882d54d7e5723b290e668342624fc298900c88c969a2f18ac8c3260018ff8f974481899f90040f28266c5dfad6433
-
SSDEEP
1536:FqBwbLWJLJFKqAZzrZA4kJJleVp5Jc0z11Mc2//qCCguJgGXTA90:FqBFJLzgOJJu5e44c2qCJuJggA90
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6cadcd9abc3d67a7a4452ec56b2ce9e078897adf895e74dae01a894a884b371.exe"C:\Users\Admin\AppData\Local\Temp\a6cadcd9abc3d67a7a4452ec56b2ce9e078897adf895e74dae01a894a884b371.exe"1⤵