Analysis
-
max time kernel
165s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/12/2022, 04:45
General
-
Target
d58d75c1d72f7fe9bea44dc455404c853069fa91e7e54bfcec27daeada9e7c02.exe
-
Size
1.7MB
-
MD5
554443a316ce9d6fc760eda34cb0f4be
-
SHA1
5b8dc991169b5e916cca193256d3cc39a11d0c9f
-
SHA256
d58d75c1d72f7fe9bea44dc455404c853069fa91e7e54bfcec27daeada9e7c02
-
SHA512
3dfcd77d56d894295d312d4501bce1362f70c36f035c5a6cd26b143766db29b151517a599bc4b923915942f2095387b55b85a4c36ff29a5a7e502aca42546c55
-
SSDEEP
24576:4mT4UlEMPzCMGUZNQJUdakgnTEW+vJ3HgonOdx+VoFD+NGJjL1nawJGF57RS2i:tEWGMGUPekg2VAonw6NCnhC5FS2i
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\d58d75c1d72f7fe9bea44dc455404c853069fa91e7e54bfcec27daeada9e7c02.exe"C:\Users\Admin\AppData\Local\Temp\d58d75c1d72f7fe9bea44dc455404c853069fa91e7e54bfcec27daeada9e7c02.exe"1⤵