Analysis
-
max time kernel
151s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/12/2022, 05:37
General
-
Target
b5d18fc0a280a2a6073a7877179a83f0523dce4ba90f50784c3fb43bd094a8dd.exe
-
Size
1.2MB
-
MD5
43a0957017d39ec37c7e2f99300c0a0e
-
SHA1
b1299c19c7def57850d4172d5934ac6dd4b783a4
-
SHA256
b5d18fc0a280a2a6073a7877179a83f0523dce4ba90f50784c3fb43bd094a8dd
-
SHA512
92646acaf7938cc1aa86349aa8599c75e96c7a5a69356d9719ed1037bdb4f75b74f8c4dcd1d9a227077778d7f6cd4ccbfbe5cd9a89c6146a230f305bf4ae18e2
-
SSDEEP
24576:lQdwU7w+3q9oy38Zmm9vLpHqAkLdckmQyBQnC4fbzTEt2IcV/Z+:ud7w+3zyxQvLEdcuyBQnC4rMcV/U
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\b5d18fc0a280a2a6073a7877179a83f0523dce4ba90f50784c3fb43bd094a8dd.exe"C:\Users\Admin\AppData\Local\Temp\b5d18fc0a280a2a6073a7877179a83f0523dce4ba90f50784c3fb43bd094a8dd.exe"1⤵