Analysis
-
max time kernel
206s -
max time network
232s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
-
submitted
04/12/2022, 10:27
General
-
Target
af724627ca75ab0738c24b6ff66837d4d316194e3305fd8b64960648a92d7ea5.exe
-
Size
4.1MB
-
MD5
808c9f35d3c2888aff633c8cb7c650f4
-
SHA1
cd50f6304930108fc23de56a0ae7e7da704af096
-
SHA256
af724627ca75ab0738c24b6ff66837d4d316194e3305fd8b64960648a92d7ea5
-
SHA512
8d975ff39bd0c27e1a61e4058769aac71e32cd4a37f1527d3d2bd0fbf7f3cd0605c99b9967af5d7e7b20ebfeb72f4219cf832089726e7b7cf60fc87a8d81e28a
-
SSDEEP
49152:IiXj1iaAVJGITcTS1S7eOvqZyDCv+5s4ucbYTir/7mcbosgXMQ+gyn5bh4OhLSwp:d1iaADZ39mJbYncbvV34yLSwndJ5
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
Processes
-
C:\Users\Admin\AppData\Local\Temp\af724627ca75ab0738c24b6ff66837d4d316194e3305fd8b64960648a92d7ea5.exe"C:\Users\Admin\AppData\Local\Temp\af724627ca75ab0738c24b6ff66837d4d316194e3305fd8b64960648a92d7ea5.exe"1⤵